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THE  AMSEC  METHODOLOGY 


AMSEC  (Analytic  Methodology  for  System  Evaluation  and  Control), 
comprised  of  three  basic  components:-, 

(1)  Vh 


AMSEC  is 


A RMAC  model  which  develops  estimates  of  system  or  subsystem 
reliability,  availability,  and  cost  from  real  or  postulated 
data  describing  the  system  design,  the  support  parameters, 
and  the  plan  for  use^  -s 

(2)  (7A  field  data  transducer  routine  which  accepts  data  routinely 

generated  by  the  Army  and  converts  it  to  RMAC  model  input 
parameters^  and 

(3)  executive  routine  which  directs  the  RMAC  model  in  a 
systematic  search  for  optimal  management  actions. 


AMSEC  can  provide  a rapid  assessment  of  vehicle  and  subsystem  reliability, 
availability,  and  life-cycle  support  cost  under  the  present  framework  of 
design,  support  and  use  parameters:  it  can  search  out  improved  maintenance 
plans,  or  search  through  alternative  product-improvement  programs  to  select 
a preferred  course  of  action;  it  can  determine  the  preferred  times  for 
rebuilding  major  components  of  the  vehicle,  or  for  buying  new,  provide 
estimates  of  optimal  sparing  levels  for  components,  recommend  cost- 
effective  modifications  in  tactics  for  use:  and  it  can  determine  the  most 
cost-effective  route  by  which  to  adapt  to  changing  needs  imposed  by  a 
shift  from  peace-time  to  war-time  operations, 
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OVERVIEW  OF  HANDBOOK 


INTRODUCTION 

The  Analytic  Methodology  for  System  Evaluation  and  Control  (AMSEC)  was 
developed  by  COBRO  scientists  for  Army  use  in  support  of  management  planning 
for  major  programs. 

System  planning  rests  on  a framework  extending  from  the  earliest  conceptual 
thinking  to  the  subsequent  thought  processes  underlying  design,  development, 
test,  production,  and  operational  use.  Early  ideas,  once  implemented  in  the 
overall  planning  process  constrain  later  options  as  to  how  system  development 
can  continue.  Thus  it  becomes  important  to  recognize  in  advance  the  interrela- 
tionship of  the  myriad  parameters  bearing  on  system  RMAC,  and  to  assess  the  way 
which  these  parameters  will  eventually  impact  on  the  operational  efficiency  and 
effectiveness  of  the  system.  AMSEC  permits  such  a predictive  investigation  of 
planning  alternatives  so  that  growth  towards  system  objectives  is  accomplished 
with  less  trial  and  error  than  would  be  the  case  in  its  absence. 

AMSEC  uses  as  figures  of  merit  for  a system  its  reliability,  maintainability 
availability  and  life-cycle  support  cost  (RMAC).  By  choosing  appropriate  defini- 
tions for  these  terms,  the  methodology  can  be  applied  to  total  systems  or  to 
components;  to  a lifetime  profile  of  plans  for  use,  or  to  a single  specified 
mission;  to  overall  effectiveness  in  meeting  design  goals,  or  to  performance  at 
different  specified  levels  of  tolerable  degradation. 


AMSEC  can  accept  data  which  is  routinely  generated  in  the  development 
process.  This  data  may  be  inaccurate  and  qualitative  in  the  earliest  stages, 
and  become  more  precise  and  quantitative  as  development  proceeds,  a„  tests  are 
carried  out,  and  as  the  system  is  fielded.  The  data  will  describe,  to  the  level 
of  accuracy  possible  at  a given  point  in  the  development,  the  design  configura- 
tion, the  life  characteristics  and  cost  of  the  components  making  up  the  system; 
the  maintenance  and  logistic  support  parameters;  the  mission  profile  and  plan 
for  use.  From  such  inputs,  AMSEC  can  be  used  to  generate  estimates  of  RMAC 
based  on  particular  combination(s)  of  parameter  values;  to  break  these  estimates 
down  by  system,  subsystem,  or  component  as  desired,  or  by  failure  category  and/or 
chargeability  criteria;  to  examine  the  effect  on  RMAC  of  alternative  changes  in 
the  way  the  system  is  designed,  supported,  and  used;  and  to  selectively  identify 
that  combination  of  changes  which  forecast  the  most  improvement  in  system  effec- 
tiveness and/or  in  cost  reduction. 

The  development  of  AMSEC  to  its  present  computerized  status  has  required 
many  man-years  of  senior  mathematical,  engineering  and  computer  programming  talent 
It  has  been  applied  successfully  to  a wide  range  of  Army  systems  (e.g.,  the  CH-47, 
UTTAS,  and  AH-1G  helicopters  and  advanced  scout  helicopters;  the  M60-A2  tank, 
the  Gama  Goat  vehicle,  and  others)  at  differing  stages  of  development,  in  the 
solution  of  different  planning  problems. 

To  provide  a realistic  representation  of  system  behavior  under  use  conditions 
the  underlying  mathematics  for  AMSEC  is  necessarily  quite  complex.  A major  effort 
has  been  made  to  keep  the  operational  use  of  the  methodology  as  simple  as  poss- 
ible. However,  the  range  of  management  problems  to  which  AMSEC  is  applicable 
spans  the  entire  cycle  of  systems  development  and  use,  and  specifically  includes 
all  decisions  which  imoact  on  R,  M,  A,  or  C.  Table  1 identifies  some  of  the  more 
important  of  these  problem  areas.  This  wide  range  of  management  interests,  each 
requiring  a different  orocedure  in  the  use  of  AMSEC  or  a different  interpretation 
of  its  output  has  necessitated  the  development  of  a User's  Manual.  The  purpose 
of  such  a manual  is  to  provide  each  of  a wide  range  of  users  with  a set  of  defin- 
tive  procedures  which  will  allow  him  to  direct  the  methodology  to  support  effec- 
tive dialogue  with  other  disciplines  and  to  arrive  at  solutions  to  specific 
Droblems  under  his  cognizance. 
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TABLE  I 

MAJOR  AREAS-^  OF  MANAGEMENT  INTEREST 
RELATED  TO  RMAC 


CONCEPT  STAGE 


Definition  of  system  operating  requirements 
Definition  o f component  life  goals 
Definition  o“  mission  R/A  goals 
Design  approach  to  function  implementation 
Developer/user  dialogue 
RMAC  trade-offs 


DESIGN  AND  DEVELOPMENT  STAGE 


1.  Definition  of  configuration/packaging  logic 

2.  Preliminary  maintenance  plan 

3.  Prediction  of  in-use  RMAC,  spares 

4.  Assessment  of  design  detail  alternatives 

5.  Selection  between  competing  vendors 

6.  System  configuration  for  mission  readiness,  reliability,  safety 

7.  Reliability/readiness  status  reports. 


TEST  STAGE 

1.  Designation  of  success/failure  criteria 

2.  Definition  of  tests  for  components,  system 

3.  Evaluation  of  test  results,  updates  RMACS  estimates 

4.  Development  of  maintenance  strategy 

5.  Allocation  of  maintenance  budget 

6.  Evaluation  of  use  of  condition  monitoring,  on-condition  maintenance 

7.  Assessment  of  RAM  and  cost  consequences  of  component  failure  bv  mode. 


OPERATIONAL  USE  STAGE 

1.  Assessment,  projection  and  reporting  of  RMAC  status 

2.  Selection  of  operating  tactics 

3.  Evaluation  of  ECP's 

4.  Selection  of  optimal  Level  of  Repair  (LOR)  distribution 


- The  breakdown  shows  the  development  stage  during  which  the  problems  identifiec 
are  usually  given  major  management  attention.  Obviously  management  concern 
with  a given  problem  type  transcends  any  arbitrary  time  schedule;  for  example 
the  RMAC  system  evaluation  is  an  important  consideration  at  all  stages. 

3 Rev.  9/7/76 


V .’*•% 


DEFINITION  OF  TERMS 

The  value  of  the  AMSEC  output  products  depends  upon  the  degree  of  sophistic- 
ation with  which  the  user  is  able  to  define  his  problem  and  to  organize  his  input 
information.  The  "language"  of  reliability  analysis,  in  which  the  methodology  is 
couched,  has  become  quite  specialized,  and  it  is  important  that  the  user  understa 
the  significance  of  the  input/output  parameters.  To  this  end,  a glossary  of  tenr 
is  provided,  in  Appendix  A to  this  Handbook.  The  user  is  referred  to  this  glossa 
and  familiarity  with  the  terms  presented  therein  is  assumed  throughout  the  Manual 
Terms  included  in  the  glossary  are  underlined  when  then  are  initially  used  in  the 
text  in  each  chapter. 

STRUCTURE  AND  OVERALL  USE  OF  AMSEC 

The  use  of  AMSEC  as  a management  evaluation  and  planning  device  is  shown 
schematically  in  Figure  1.  There  are  three  basic  components  comprising  the 
methodology: 

1.  The  AMSEC  Field  Data  Transducer  accepts  raw  field 
data  in  the  form  generated  by  the  Army  and  develops 
the  component  life  and  performance  parameters  as 
required  by  the  evaluation  model. 

2.  The  AMSEC  RMAC  Evaluation  Model  accepts  the  para- 
meters developed  by  the  transducer,  plus  other 
parameters  bearing  on  plan-for-use  and  component 
cost,  and  develops  estimates  of  system  and  component 
RMAC. 

3.  The  AMSEC  Executive  Routine  consists  of  a screen- 
ing and  search  logic  for  converging  systematically 
on  optimal  management  actions  concerned  with  RMAC. 

The  first  problem  facing  the  user  is  therefore  the  determination  of  the 
necessary  input  parameters.  These  parameters  are  generated  in  three  different 
sources  which  are  organizationally  distinct  in  the  Army;  the  basic  relevant  data 
bearing  on  RMAC,  and  their  sources,  are  identified  in  Figure  2.  Thus  AMSEC  will 
in  orinciple  se^ve  to  integrate  diverse  elements  of  information  across  organiza- 
tional lines,  and  to  provide  a basis  for  dialogue. 


FIGURE  1 

USE  OF  AMSEC  FOR  SYSTEM  EVALUATION  AND  CONTROL 
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The  process  of  driving  out  the  sensitive  parameters  from  the  data  routinely 
generated  by  these  different  Army  elements  is  not  a trivial  one,  but  it  can  be 
broken  down  into  a set  of  defined  procedures.  The  resources  available  to  do  this 
depend  upon  the  particular  parameters  in  question,  upon  the  stage  of  develop- 
ment at  which  the  problem  is  being  analyzed,  and  upon  the  extent  of  documentatior 
normally  generated.  For  example,  consider  the  parameters  describing  the  aging 
characteristics  of  a component  (e.g.,  the  A and  B parameters  of  the  Weibull  distr 
bution).  At  the  earliest  stages  of  conceptual  planning  and  design,  the  only  soli 
data  available  to  the  analyst  is  that  from  measurements  on  generically  similar 
equipment.  He  may  be  in  a position  to  modify  these  estimates  in  the  light  of  his 
judgment  of  the  engineering  differences  in  the  new  component.  The  fact  remains 
that  at  this  stage  there  is  often  a considerable  uncertainty  in  the  values  of  the 
and  B_  parameters.  The  analyst  may  indeed  be  more  concerned  in  investigating  a 
range  of  possible  values  to  determine  the  consequences  parametrically,  and  to 
then  direct  future  development  of  that  component  toward  the  most  cost-effective 
life  characteristics.  For  such  a sensitivity  study,  of  course,  a precise  know- 
ledge of  the  value  of  the  parameter  under  study  is  not  needed.  However,  the  best 
available  value  of  the  other  parameters  should  be  used. 

As  development  proceeds,  better  engineering  evidence  is  usually  generated, 
e.g.,  physics-of- failure  studies,  failure  modes,  effects  and  criticality  anal- 
yses, bench  tests,  etc.  Field  testing  of  the  prototype  system  will  provide 
still  more  definitive  evidence.  And  finally,  as  the  system  moves  into  actual 
operational  use,  estimates  of  A and  B can  become  very  precise.  At  the  latter 
two  stages,  the  AMSEC  data  transducer  element  can  be  used  to  develop  best  esti- 
mates of  life  characteristics  directly  from  recorded  field  observations. 

Operational  plans-for-use  information  is  often  also  somewhat  vague  in  the 
early  stages  of  a program,  but  the  preliminary  operational  requirement  document- 
ation will  usually  define  a rough  mission  statement.  As  the  program  advances 
these  mission  requirements  may  be  more  fully  articulated.  In  a similar  way 
the  support  Dlan  parameters  are  usually  stated  crudely  if  at  all  at  the  concept 
stage,  and  then  are  refined  as  the  program  proceeds. 
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After  the  input  parameters  have  been  obtained  and  entered  into  the  com- 
puter, the  RMAC  evaluation  element  of  AMSEC  provides  estimate(s)  of  RMAC  and  spar 
requirements  for  the  soecific  combination(s)  of  parameters  which  are  entered. 

A single  evaluation,  corresponding  to  a single  set  of  input  values,  is  referred 
to  as  a "point-estimate".  Each  such  estimate  provides  a multiple  RMAC  assess- 
ment, including  values  for  component,  subsystem,  and  system  levels,  and  a time- 
line prediction  of  future  RMAC  behavior  stemming  from  the  "single-point"  input 
parameters.  Thus  the  analyst  has  the  option  of  assessing  the  values  for  an 
immediate  next  mission,  or  of  watching  the  progressive  changes  in  RMAC  over  time 
due  to  system  aging,  or  of  focussing  on  the  asymptotic  "steady  state"  values  of 
RMAC  toward  which  the  system  gravitates  over  time.  All  of  these  options  stem 
from  the  same  input  data. 

Finally  the  Executive  Routine  develops  a sequence  of  such  point-estimate 
solutions,  following  a built-in  screening  and  search  logic,  which  provides  a 
display  of  sensitivity  of  RMAC  to  changes  in  the  underlying  variables,  and  a 
procedural  convergence  on  optimal  combinations  of  parameter  values  as  directed 
by  the  analyst. 

It  should  be  noted  that  the  use  of  the  three  elements  of  AMSEC  to  carry  out 
a particular  tyoe  of  analysis  is  the  same  regardless  of  the  stage  of  development. 
However  the  input  data  quality  may  vary  greatly  with  stage  of  input,  as  well 
as  the  particular  mix  of  analyses  which  are  of  greatest  significance  to  the  pro- 
gram manager. 

The  inherent  complexity  of  AMSEC  can  be  appreciated  by  referring  to  Figure  3 
showing  the  logic  deperdency  of  the  major  variables  which  impact  on  RMAC.  In 
the  simplest  terms,  RMAC  for  a system  or  for  a component  depends  upon  how  the 
system  (component)  is  designed,  how  it  is  supported,  and  how  it  is  used  opera- 
tionally. These  broad  categories  can  be  broken  down  into  primary  variables  which 
must  be  considered;  each  of  these  can  be  further  broken  down  into  the  secondary 
variables  on  which  they  in  turn  depend,  the  tertiary  variables,  etc.  For  example, 
availability  for  a component  depends  upon  its  repair-time  distribution,  among 
other  things.  Repair  time,  in  turn,  is  made  up  of  several  components,  e.g., 
time  to  diagnose,  t’me  to  remove,  time  for  administrative  delays  (awaiting 
supolies,  etc.)  a^d  time  for  corrective  repair.  Removal  time  depends  in  turn 
uoon,  fo”  example,  the  skill  level  of  the  maintainer,  but  it  also  depends  upon 
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the  packaging  configuration  and  accessibility  built  into  the  system  design. 
Further,  the  importance  of  component  removal /repair  time,  as  it  effects  avail- 
ability, depends  upon  the  operational  framework,  e.g.,  the  planned  utilization 
of  the  component,  the  allowable  downtime,  the  importance  of  the  component  to  the 
mission  and  the  overall  importance  of  the  mission  to  the  Army. 

AMSEC  provides  for  explicit  entry  of  all  primary  elements  and  most  second- 
ary elements  into  the  model.  Each  element  is  subject  to  management  control  and 
manipulation,  through  the  dependency  links  of  Figure  3.  Each  element,  when  so 
specified  has  its  own  characteristic  effect  on  RMA  and  on  cost.  If  all  other 
elements  were  kept  fixed  it  would  be  a relatively  straightforward  problem  to  dete 
mine  the  "best"  configuration  for  a single  remaining  element,  provided  the  inter- 
relationship between  it  and  the  figures  of  merit  could  be  quantified.  The  objec- 
1 tive  in  developing  an  optimal  maintenance  strategy  or  in  addressing  other  manage- 

ment decisions  is  to  select  that  combination  of  parameter  values  for  each  element 
which,  taken  together,  maximize  system  RAM  within  a specified  budget--or  converse' 
minimize  cost  while  achieving  a specified  level  of  material  R/A/M.  To  converge  or 
a cost-effective  mix  of  strategy  elements,  it  is  necessary  for  AMSEC  to  quantify 
the  interrelationships  shown  in  Figure  3. 

I 

To  be  useful,  the  AMSEC  model  of  interrelationships  had  to  meet  several 
criteria.  It  had  to  provide  a reasonably  close  approximation  to  field  use  reality 
without  falling  back  or  simplifying  (but  unrealistic)  assumptions.  For  example, 
it  had  to  recognize  the  impact  of  component  aging  and  wearout  on  the  selection  of 
a maintenance  strategy.  Similarly,  it  must  recognize  the  impact  of  variations  in 
maintenance  strategy  upon  system  safety.  Furthermore,  it  must  be  capable  of 
rapid  iteration  (analytic  as  opposed  to  simulation)  in  order  to  search  efficientl 
over  a multi-dimensional  mathematical  surface  to  find  preferred  parameter  settings 
The  cost  component  of  the  model  had  to  be  responsive,  particularly  to  the  variable 
costs  associated  with  changes  in  maintenance  strategy,  i.e.,  cost  of  material  for 
component  and  part  renewal;  capital  costs  for  installation  of  diagnostic  and  other 
support  equipment  or  for  design  improvements;  costs  of  labor  (although  with  a 
semi -fixed  organization  this  may  not  be  as  sensitive  as  material  costs;)  and  cost 
of  failure  (e.g.,  safety,  loss  of  1 ife/ equipment,  mission  failure).  Finally,  the 
model  had  to  be  predictive  in  the  sense  that  it  could  estimate  material  condition 
and  cost  ^cr  parameter  values  outside  of  current  practice. 


AMSEC  is  structured  to  provide  the  interrelationships  identified  in 
Figure  3 while  subject  to  these  criteria.  The  heavy  lines  show  the  portions 
of  the  total  planning  problem  which  have  been  incorporated  in  AMSEC  at  the 
time  of  this  publication.  The  methodology  deals  With  different  component  fail- 
ure modes  in  a completely  realistic  way,  recognizing  wearout,  aging  and  perform- 
ance degradation  as  well  as  random,  catastrophic  failures.  It  provides  for  a 
detailed  definition  of  the  design  configuration,  for  difference  in  support  con- 
cept and  for  a complete  description  of  operational  tactics.  Extensions  of  AMSEC 
to  deal  with  parameters  at  the  tertiary  level  or  below  can  be  handled  in  modular 
fashion;  the  format  of  this  Manual  is  loose-leaf  to  facilitate  later  update  to 
the  analytic  capability  of  AMSEC. 

Much  of  the  AMSEC  methodology  has  been  computerized.  Certain  portions,  in 
particular  the  process  of  obtaining  input  parameters,  and  some  of  the  executive 
routines,  are  not  yet  programmed  fo**  computer  use.  In  these  cases  the  correspond 
ing  manual  procedures  have  been  fully  documented. 

ORGANIZATION  LOGIC  FOR  HANDBOOK 

The  basic  divisions  of  this  Handbook  fall  along  the  lines  of  the  three 
components  of  AMSEC,  i.e.. 

Section  I.  DEVELOPMENT  OF  INPUT  PARAMETERS,  describes 
the  procedures  involved  in  specifying  each  of  the  para- 
meter values  for  input  into  AMSEC. 

Section  II.  USE  OF  EVALUATION  MODEL  sets  forth  the 
computer  procedures  for  generating  point  estimates  of 
R,  M,  A,  C and  spares  for  a specified  set  of  input 
parameters,  and 

Section  III.  APPLICATIONS  FOR  PLANNING  AND  DECISIONS 
describes  procedures  and  executive  routines  for  iterative 
use  of  the  evaluation  model  to  support  more  complex 
decisions. 

Within  each  of  these  major  sections,  the  subject  matter  is  organized  to  deal 
with  differences  in  specific  treatment  at  different  stages  of  the  system  develop- 
ment/use cycle,  i.e.. 

Chapter  1 : Concept  Stage 

Chapter  2:  Design  and  Development  Stage 
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Chapter  3:  Testing  Stage,  and 
Chapter  4:  Operational  Use  Stage 


; 

I 
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Finally  within  each  Chapter,  the  major  subdivisions  are  directed  to  the 
various  problem  types  that  are  of  concern  to  management  during  the  specific 
stage  of  development.  Each  problem  is  viewed  from  the  standpoint  of  several 
different  users. 

a.  A Description  of  the  Problem  is  provided  which 
serves  to  identify  the  particular  area  of  interest 
under  consideration.  This  section  is  directed 
toward  program  management,  and  provides  an  over- 
view of  (a)  the  problems  of  parameter  estimation 
which  are  important  to  program  control,  and 

(b)  the  decision  and  evaluation  areas  in  which  he 
can  expect  support  from  AMSEC. 

b.  An  Analysis  Procedure  is  presented  which  is  directed 
toward  the  systems  analyst.  This  describes  the 
step-by-step  procedures  to  be  followed  in  applying 
AMSEC  to  the  problem  at  hand  and  provides 
illustrative  example(s)  where  these  would  be  useful. 

c.  A Computer  Programming  Summary  is  set  forth,  with 
an  Appendix,  where  necessary,  which  cross- 
references  for  the  benefit  of  the  programmer  the 
source  documentation  which  is  available. 

The  organization  of  tHe  Handbook  is  thus  characterized  by  the  following 
morphology: 

SECTION:  AMSEC  COMPONENT 
CHAPTER:  STAGE  OF  SYSTEM  DEVELOPMENT 
Subchapter:  Problem  Type 
Problem  Description 
Analysis  Procedure 
Computer  Programming  Summary 
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In  order  to  accommodate  each  of  a wide  variety  of  users  and  interests, 
an  effort  has  been  made  to  keep  each  portion  of  the  Handbook  complete  in 
itself-  Since  some  of  the  procedures  and  examples  are  applicable  at  all  stages 
of  development,  this  approach  has  led  to  a certain  amount  of  redundancy;  how- 
ever, the  gain  in  clarity  and  simplicity  of  exposition  for  a reader  interested 
in  a single  problem  description,  and  the  avoidance  of  unnecessary  cross- 
references,  were  felt  to  justify  this  repetition. 
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SECTION  I 

DEVELOPMENT  OF  INPUT  PARAMETERS 
INTRODUCTION 


The  input  parameters  required  for  the  operation  of  AMSEC  are  shown  for 
reference  in  Table  1.1.  Full  definitions  are  set  forth  in  the  Glossary  of  Terms, 
Appendix  A. 

The  approach  to  the  problem  of  specifying  parameter  values  for  a given  AMSEC 
run  is  different  depending  upon  whether  a point-estimate  of  the  parameter  is  re- 
quired, or  simply  an  operating  range  of  values  for  purposes  of  a sensitivity 
analysis.  In  both  cases,  the  sources  of  available  information  and  the  specific 
data  collection  and  processing  steps  may  differ  depending  on  the  stage  of  develop- 
ment during  which  the  data  are  required. 

The  following  pages  describe  the  estimation  process  in  each  case. 
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TABLE  1.1 

INPUT  PARAMETERS  USED  IN  AMSEC  METHODOLOGY 


SYSTEM  CONFIGURATION 

• Number  of  components  in  equipment  (n^) 

• Number  of  equipments  in  system  (N) 

• Number  required  for  equipment  readiness  (x^) 

• Number  required  for  mission  success  (*\) 

COMPONENT  LIFE  CHARACTERISTICS 

• Number  of  mission  failure  modes  (for  kth  component)  (m^) 

• Number  of  failure  stages  for  each  mode,  S^  . 

• Survival  distribution  (curve)  for  each  stage,  S'^j 

COMPONENT  MAINTAINABILITY/MAINTENANCE/SERVICE 

• Probability  of  handling  error  (1-6k)  (constant) 

• Renewal  distribution  (curve)  (Yu-(t))  (preventive,  initiation  of  action) 

• Renewal  distribution  (curve)  (Y2k(T))  (preventive,  maintenance  time  after 

initiation)  

• Non-renewal  distribution  (curve)  (8k(t)) 

• Renewal  distribution  (curve)  (ak(t))  (corrective) 

• Service  frequency  (fs) 

• Man  hours  per  service"  (h^g) 

• Man  hours  per  pm  renewal  (h|<] ) 

• Man  hours  per  Fandl ing/Transportation  (H/T)  mishap  (h^) 

• Man  hours  per  mission  failure  (h^) 

LOGISTIC  SUPPORT 

• Component  rebuild  cycle  (Rc) 

• Component  protection  level  (spares)  (Qs) 

• Number  of  systems  to  be  supported  {h) 

• Number  of  spares  of  the  kth  component/equipment  on  hand, 

• Lead  time  for  spares  requisition  (T) _ ..  

OPERATIONAL  USE 

• Number  of  missions  (v) 
e Mission  time  (t) 

1 9 Time  between  missions  (-) 

• Component  utilization  factor  (p.  ) 

4.U 

j o Fai’’,Jre  moce  criticality  factor  for  kt,n  component  C^f 
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TABLE  1.1  (Cont) 
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COST  BASIS 

• Cost  ($)  per  service  man  hour  (C^q) 

• Cost  ($)  per  PM  man  hour  (C^) 

• Cost  ($)  per  CM  man  hour  (C^)  for  handling/transportation  failure 

• Cost  per  man  hour  for  CM  by  failure  mode  (Ck3  m) 

• Material  cost  ($)  per  service  (C'^q) 

• Material  cost  ($)  per  PM  renewal  ( C ' ) 

• Material  cost  ($)  per  CM  renewal  (C 1 k2 ) f°r  handling/transportation 

• Material  cost  ($)  per  CM  by  failure  mode. 

• Cost  ($)  unavailability  (C^) 
t Cost  ($)  unreliability  (C^) 


[ 
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CHAPTER  1 

INPUT  PARAMETERS— CONCEPT  STAGE 


* INTRODUCTION 

At  the  concept  stage  of  development,  and  even  in  the  early  design  stage, 
the  system  is  only  roughly  defined;  the  effect  of  some  parameters  may  not  yet 
be  recognized  or  understood,  and  all  parameters  are  subject  to  change  as 
development  proceeds  and  better  information  becomes  available.  No  system- 
specific  tests  have  been  carried  out,  and  the  only  firm  information  about  the 
system  is  in  the  form  of  preliminary  requirements  and  specifications.  Corollary 
data  may,  however  be  available  for  generically  similar  systems  or  components 
which  have  already  been  designed,  tested  and  operated. 

Operational  and  support  plans  are  also  likely  to  be  poorly  defined,  usually 
based  on  a set  of  "requirements”  which  are  admittedly  planning  values  and  which 
may  even  be  internally  inconsistent. 

Procedures  for  parameter  estimation  at  the  concept  stage  provide  for  the 
preparation  of  a check-list  of  available  sources  of  information,  a formalized 
routine  for  extracting  the  best  data  possible  from  those  sources,  and  the  establish 
ment  of  criteria  for  ranking  the  quality  of  the  data. 

It  is  important  to  recognize  that  the  process  of  parameter  estimation  at 
the  concept  stage  establishes  target  values  which  are  considered  reasonable. 

The  interrelating  of  these  estimates  into  an  RMAC  sensitivity  analysis  during 
concept  can  be  of  majo1"  value,  since  the  analyst  usually  has  much  greater 
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flexibility  in  selecting  parameter  values  to  obtain  the  most  cost-effective 
combination.  The  analysis  at  this  stage  serve  to  aim  the  overall  development 
program  in  the  general  direction  of  optimality,  so  that  early  gross  errors  can 
be  avoided  and  future  refinements  in  program  thrust  can  be  more  readily  made  as 
new  information  becomes  available. 


* 
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DETERMINATION  OF  SYSTEM  CONFIGURATION  PARAMETERS:  POINT  VALUES 
Problem  Description 

The  problem  facing  the  analyst  is  to  obtain  the  most  accurate  possible 
statement  of  each  of  the  system  configuration  parameters,  based  on  the  totality 
of  available  information.  The  sources  of  data  available  at  this  stage  of 
development  are  quite  limited.  They  may  include  any  or  all  of  the  following: 

• Documentation  of  system  operating  requirements. 

• Engineering  or  Project  Management  (PM)  studies 

of  conceptual  approaches--e.g. , component 
packaging  and  support  schemes;  reliability 
block  diagrams;  component  life  parameters. 

• Preliminary  cost  information. 

• Documentation  on  generically  related  systems. 

• Contemporary  engineering  judgment. 

The  specific  subsystems  which  are  required  for  a mission  and  the  amount  of 
redundancy  depends  both  on  the  complexity  and  rigor  of  the  mission  and  on  the 
interest  which  the  analyst  has  in  achieving  maximum  performance,  or  in  compromis- 
ing on  lower  levels  of  performance,  and  on  the  emphasis  of  safety. 

A structured  survey  of  the  available  sources,  and  an  objective  synthesis 
of  the  data  contained  therein,  will  provide  a current  "best  estimate"  of  the 
configuration  parameters,  N,  n^,  Xj^,  and  X'k  for  each  type  of  mission  assignment, 
and  will  define  the  interrelated  reliability  logic  for  all  components  comprising  the 
system. 

Analysis  Procedure 

1.  Obtain  existing  documentation  of  system  from  system  proponent, 

TRADCC  and/or  from  the  cognizant  PM  as  available. 

2.  Obtain  documentation  on  related  systems  from 
appropriate  ’’M  and/or  from  operating  Army 
agencies. 

3.  Obtain  results  of  any  conceptual  or  pre-design 
studies  from  PM. 

4.  Brine  forward  mission  requirements  and  perform- 
ance thresholds  of  interest  from  analysis  of 
operational  parameters  (see  page  34). 
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5.  Conduct  engineering  discussions  with  cognizant 
PM  engineers.  Factors  to  be  considered  in 
engineering  discussions  of  the  configuration 
parameters  include  constraints  imposed  on  R_,M,A 
or  C;  space  and  weight  constraints;  failure 
modes,  effects  and  criticality. 

6.  Prepare  matrix  of  sources  vs.  configuration  data 
elements,  and  enter  estimates  for  maximum  capa- 
bility missions;  prepare  a similar  matrix  for 
reduced  capability  missions  and  for  safety  (see 
illustrative  Figure  1.1). 

7.  Prepare  estimates  of  priority  to  be  assigned  to 
the  different  sources,  and  enter  on  work-sheet. 

8.  Enter  selected  value  of  each  parameter  in  right 
column.  This  will  normally  be  the  value 
corresponding  to  the  highest  priority  source. 

If  another  value  is  used  enter  reason  for  such 
selection  as  exhibit. 

Computer  Programming  Summary 


None  required. 
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PM  Related  Engineer  Selected 

TRAOOC  Study  Systems  Estimate  Other  Nominal  Value 


Tc  be  completed  for  maximum  capability  missions,  reduced 
capability  missions,  and  safety,  as  specified  by  analysis 
criteria. 


FIGURE  1.1.  WORKSHEET  FOR  DETERMINATION  OF  SYSTEM 
CONFIGURATION  PARAMETERS 
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DETERMINATION  Oc  SYSTEM  CONFIGURATION  PARAMETERS:  RANGE  OF  VALUES 
Problem  Description 

For  purposes  of  a sensitivity  analysis  of  a given  variable,  it  is  necessary 
to  identify  a range  of  values  of  interest,  over  which  the  variable  could  be 
tentatively  assigned  for  investigation,  without  exceeding  the  bounds  of  feasi- 
bility. The  sources  of  data  available  are  essentially  the  same  as  those  for  the 
determination  of  point-values. 

Analysis  Procedure 

1.  Determine  specific  configuration  variable(s) 
which  are  of  concern  to  management  for  sensitivity 
study  and  optimization.  Where  necessary,  confirm 
this  selection  with  the  cognizant  PM. 

2.  Prepare  preliminary  definition  of  ranges  of 
interest  for  each  variable.  Where  the  limits  of 
practical  interest  are  not  obvious,  the  rule  of 
thumb  for  analysis  is  to  select  a range  which  is 
too  large  rather  than  too  small.  Where  necessary, 
obtain  engineering  guidance  on  the  selection. 

Factors  to  be  considered  as  bearing  on  practicality 
of  parameter  values  are  basically  the  same  as  for 
point  estimates— i .e. , weight  and  space  constraints, 
system  R,M,A,C  requirements. 

Computer  Programming  Summary 

None  required. 
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DETERMINATION  OF  COMPONENT  LIFE  CHARACTERISTIC  PARAMETERS:  POINT  VALUES 
Problem  Description 

In  its  operational  life  a component  is  subjected  to  various  operational 
and  environmental  stresses  which  may,  singly  or  in  combination,  degrade  the 
ability  of  the  component  to  perform  until  that  ability  falls  below  an  acceptable 
threshold.  At  that  time  the  component  is  said  to  have  failed.  The  dominant 
stresses  which  must  be  considered  include,  e.g.,  operating  overload;  calendar 
time;  operating  time,  operating  miles,  or  rounds,  and  such  environmental  stresses 
as  temperature  and  humidity.  If  one  assumes  that  the  system  is  properly  used, 
the  prevailing  functional  arguments  for  failure  usually  relate  to  the  duration 
of  the  operational  hazards.  Failure  of  the  component  may  occur  in  any  of  several 
modes,  e.g.,  breaks  or  open  circuits,  excessive  wear,  jamming,  etc. 

The  life  characteristics  of  a component  can  be  expressed  in  terms  of  the 
probability  distribution  for  surviving  each  mode  of  failure,  as  a function  of 
the  extent  of  exposure  to  the  dominant  hazard(s).  AMSEC  provides  for  considera- 
tion of  either  one  or  two  "stages"  of  hazard  exposure  within  a failure  mode. 

As  an  example,  the  first  stage  may  represent  the  operating  hours  until  initiation 
of  a new  major  hazard,  and  the  second  stage  may  represent  the  duration  of  that 
hazard  before  failure.  The  first  stage  event  may  be  (e.g.)  the  initial  pitting 
of  a bearing,  and  may  be  exponentially  (randomly)  distributed;  this  triggers  a 
second  stage  wearout  mechanism,  which  could  be  represented  by  a Weibull  distribu- 
tion, and  which  leads  to  bearing  failure  at  the  end  of  that  stage,  in  the  mode 
which  was  triggered. 

AMSEC  accepts  as  input  the  failure  law  for  a component  by  mode  and  stage 
either,  expressed  as  a two  parameter  Weibull  distribution,  or  described  by  a 
curve  composed  of  end-to-end  linear  segments  drawn  from  empirical  data  or 
hypothetical  reasoning.  It  is  obvious  that  the  linear  segment  curve  input 
requires  as  many  point  (XY)  pairs  as  there  are  segments.  For  the  Weibull,  two 
parameters  are  necessary.  For  each  stage  and  mode,  AMSEC  will  permit  the  para- 
meters of  location  and  shape  to  be  input  directly,  or  alternatively  permit 
estimates  of  the  MTBF  and  the  probability  that  the  component  will  survive  one- 
half  the  MTBF  to  be  inserted. 


23 


1-1 


At  the  concept  stage,  the  data  available  to  the  analyst  depends  upon 
whether  the  coirponent  is  a new  design  or  is  "off-the-shelf."  The  problem  is 
to  investigate  all  possible  sources  of  life  data  and  develop  a best  estimate 
of  the  parameters  characterizing  the  distribution. 

Analysis  Procedure 

1.  For  the  component  under  investigation,  determine 
if  it  is  a new  design  or  is  "off-the-shelf." 

2.  (a)  If  off-the-shelf,  investigate  availability  of 
design  studies  or  test  and/or  operational  data. 

If  available,  follow  procedures  for  appropriate 
stage  of  development  as  set  forth  on  later  pages. 

(b)  If  not  off  the  shelf,  or  if  sufficient  data 
not  available,  proceed  to  Step  3 below. 

3.  Obtain  existing  documentation  on  component  life 
requirements  and/or  estimates  from  TRADOC  and 
the  cognizant  PM. 

4.  Conduct  engineering  discussions  with  cognizant 

PM  engineers.  These  discussions  should  be  structured, 
first  to  bracket  the  parameter  value  in  question, 
for  each  failure  mode,  then  to  narrow  the  bracket  as 
much  as  possible.  Factors  to  be  considered  include 
any  knowledge  of  catastrophic  failure  and  aging 
mechanisms,  orobable  stress  conditions  when  in  use, 
and  the  level  of  performance  below  which  the 
component  will  be  defined  as  having  failed. 

5.  Prepare  matrix  of  sources  vs.  life  characteristics 
estimates  by  mode,  and  enter  estimates  (see  Figure  1.2). 

6.  Prepare  estimates  of  priority  to  be  assigned  to 
different  sources,  and  enter  on  worksheet. 

7.  Enter  selected  value  of  each  parameter  in  right 
column.  This  will  normally  be  the  value  correspond- 
ing to  the  highest  priority  source.  If  another  value 
is  used  enter  reason  for  such  selection  as  an  exhibit. 

Computer  Programming  Summary 

None  required. 
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Engineer  Selected 

Estimate  Other  Nominal  Value 

Mode  Mode  Mode  Mode  Mode  Mode  Mode  Mode  Mode  Mode 


FIGURE  1.2.  WORKSHEET  FOR  DETERMINATION  OF  COMPONENT 
LIFE  CHARACTERISTICS 
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DETERMINATION  OF  COMPONENT  LIFE  CHARACTERISTIC  PARAMETERS:  RANGE  OF  VALUES 
Problem  Description 

For  purposes  of  a sensitivity  analysis  of  a given  variable,  it  is  necessary 
to  identify  a range  of  values  of  interest,  over  which  the  variable  could  be 
tentatively  assigned  for  investigation,  without  exceeding  the  bounds  of  feasi- 
bility. The  sources  of  data  available  are  essentially  the  same  as  those  for  the 
determination  of  point  values. 

Analysis  Procedure 

1.  Determine  the  specific  life/mode  variables  which 
are  of  concern  to  management  for  sensitivity 
study  and  optimization.  Where  necessary,  confirm 
this  selection  with  the  cognizant  PM. 

2.  Establish  preliminary  definition  of  ranges  of 
interest  for  each  life/mode  parameter  of  interest. 

Where  the  limits  of  practical  interest  are  not 
obvious,  the  rule  of  thumb  for  analysis  is  to 
select  a range  which  is  too  large  rather  than 

too  small.  Where  necessary,  obtain  engineering 
guidance  on  the  selection.  Factors  to  be  con- 
sidered as  bearing  on  practicality  of  parameter 
values  are  basically  the  same  as  for  point 
estimates— i .e. , aging  and  catastrophic  failure 
mechanisms,  and  problem  use  conditions. 
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DETERMINATION  OF  COMPONENT  MAINTENANCE/MAINTAINABILITY  PARAMETERS:  POINT  VALUES 
Problem  Description 

The  maintainability  of  a component  describes  the  ability  of  the  maintainer, 
of  specified  skill  level,  to  detect  and  diagnose  a failed  component,  and  to 
take  the  appropriate  replacement/repair  actions.  Design  feature  such  as  accessi- 
bility and  monitorabil ity  must  be  considered,  as  well  as  availability  of  skills, 
specialization  of  tools  and  equipment  required,  and  training  capability. 

Relevant  maintainability  parameters  include  a,  0,  Y2»  <$,  and  h*  The  para- 
meter Y2|<(t),  the  distribution  of  removal /repair  time  fonce  action  is  initiated,(  Yik 
composed  of  several  sub-elements,  e.g.,  time  to  inspect,  time  to  diagnose,  time 
to  remove/replace,  time  to  repair,  and  gap  times  while  waiting  for  parts,  for 
appropriate  skills  or  for  tools.  Relevant  maintenance  parameters  deal  with  the 
features  of  policy  (e.g.,Y^,  f ) and  the  status  of  skills,  tools,  and  equipment 
provided. 

At  the  concept  stage,  the  data  available  to  the  analyst  depends  upon 
whether  the  component  design  is  new  or  its  interface  with  the  system  different. 

It  also  depends  upon  whether  the  system  will  be  used  in  a substantially  different 
environment  than  corresponding  systems  with  similar  components.  The  problem  is 
to  investigate  all  possible  sources  of  maintainability  data  and  develop  a best 
estimate  of  the  parameters  identified  above. 

Analysis  Procedure 

1.  For  the  component  under  investigation,  determine 
if  it  is  a new  design  or  is  "off-the-shelf." 

2.  (a)  If  off-the-shelf,  investigate  availability  of 
design  studies  or  of  test  or  operational  data 

on  maintainability.  Relevant  MEA  data  are  among 
the  first  documents  to  provide  estimates  pf  these 
parameters  aod  should  be  investigated.  If  such 
information  is  available  follow  procedures  for 
aporoDriate  stage  of  development  as  set  forth  on 
later  pages. 

(b)  If  not  off-the-shelf,  or  if  M data  are  not 
avai'able,  proceed  to  Step  3 below. 
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3-  Obtain  existing  documentation  on  component  mainten- 
ance/maintainabil i ty  requirements  and/or  estimates 
from  TRADOC  and  the  cognizant  PM. 

4.  Conduct  engineering  discussions  with  cognizant 

PM  engineers  These  discussions  should  be  structured, 
first  to  bracket  the  parameter  value  in  question,  then 
to  narrow  the  bracket  as  much  as  possible.  Factors 
to  be  considered  in  such  a discussion  include  the 
skill  levels  which  will  be  available,  the  environ- 
mental conditions  under  which  maintenance  will  be 
carried  out,  and  system  operating  schedules  (e.g., 
allowable  down  time,  etc.).  For  a preliminary  esti- 
mate, with  no  supporting  data,  values  of  a=l , B=0, 
Yl*l,  _6^1  may  be  used  a priori.  An  estimate  of 
the  mean  value  of  Y2 (t)  may  be  used. 

5.  Prepare  matrix  of  sources  vs.  maintainability/mainte- 
nance  curves  and/or  parameters  and  enter  estimates 
(see  Figure  1.3). 

6.  Prepare  estimates  of  priority  to  be  assigned  to 
different  sources,  and  enter  on  worksheet. 

7.  Enter  selected  value  of  each  maintainability/mainte- 
nance curve  or  parameter  in  right  column.  This 

will  normally  be  that  corresponding  to  the  highest 
priority  source.  If  another  value  is  used  enter 
reason  for  such  selection  as  an  exhibit. 

Computer  Programming  Summary 


None  required. 


Data  Source 


PM  Engineer  Selected 

TRADOC  Study  Estimates  Other  Nominal  Value 


— ^ All  terms  defined  in  Glossary,  Appendix  A. 


FIGURE  1.3.  WORKSHEET  FOR  DETERMINATION  OF  COMPONENT 
MAINTAINABILITY  CURVES  AND/OR  PARAMETER  VALUES 
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DETERMINATION  OF  COMPONENT  MAINTENANCE/MAINTAINABILITY  PARAMETERS:  RANGE  OF  VALUES 
Problem  Description 

For  purposes  of  a sensitivity  analysis  of  a given  variable,  it  is  necessary 
to  identify  a range  of  values  of  interest,  over  which  the  variable  could  be 
tentatively  assigned  for  investigation,  without  exceeding  the  bounds  of  feasi- 
bility. The  sources  of  data  available  are  essentially  the  same  as  those  for 
the  determination  of  point  values. 

Analysis  Procedure 

1.  Determine  the  specific  maintenance/maintainability 
variables  which  are  of  concern  to  management  for  sensi- 
tivity study  and  optimization.  Where  necessary  confirm 
this  selection  with  the  cognizant  PM. 

2.  Establish  preliminary  definition  of  ranges  of 
interest  for  each  parameter  of  interest.  Where 
the  limits  of  practical  interest  are  not  obvious, 
the  rule  of  thumb  for  analysis  is  to  select  a 
range  which  is  too  large  rather  than  too  small. 

Where  necessary,  obtain  engineering  guidance  on 
the  selection.  Factors  to  be  considered  as  bear- 
ing on  practicality  of  maintainability  parameter 
values  are  basically  the  same  as  for  point 
estimates— i .e. , the  skill  levels  available,  range 
of  environmental  conditions,  allowable  down  times. 
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DETERMINATION  OF  LOGISTIC  SUPPORT  PARAMETERS 
Problem  Description 

The  logistic  complex  which  supports  a fleet  of  operating  systems  is  com- 
prised of  an  entire  chain  of  functions,  from  production  and  acquisition  to 
shipping,  storage/inventory,  handling,  inspection  and  preparing  for  use.  These 
functions  all  have  as  their  ultimate  objective  the  supplying  of  necessary 
components,  equipment  and  skills  to  keep  this  fleet  in  a required  state  of  readi- 
ness. The  figures  of  merit  for  the  logistic  system  are: 

a.  The  probability  that  no  unit  of  the  fleet  is  in 
an.  unavailable  state  because  of  lack  of  skills  or 
replacement  components,  over  a specified  period  of 
time,  and 

b.  The  cost  of  the  logistic  system  allocatable  to  the 
fleet  under  consideration.  This  cost,  ultimately, 
is  one  component  making  up  the  material  cost  of 
components  (i.e.,  cost  = cost  of  production  plus 
cost  of  delivery). 

The  top-level  parameters  describing  the  logistic  complex  are: 

a.  The  number  of  systems  in  the  fleet  to  be 
supported  (h). 

J.L. 

b.  The  number  of  spares  for  the  k equipment  which 
are  on  hand  or  would  be  available  as  needed  (W^), 
and 

c.  The  statistical  protection  level  which  is  required  for  the  fleet  ((£). 

The  three  parameters  are  interdependent,  so  that  if  two  are  given,  the 
third  can  be  calculated  through  AMSEC.  Normally  the  parameters  which  are  re- 
quired as  input  are  h and  Q,  with  AMSEC  providing  an  estimate  of  the  spares 
required  for  each  component,  in  order  to  provide  the  specified  level  of  fleet 
protection. 

Analysis  Procedure 

1.  Discuss  with  TRADOC  the  probable  range  of  fleet 
sizes  (h)  wh'ch  are  of  operational  interest  to 
the  Army.  Factors  to  be  considered  include 
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current  deployment  tactics,  rate  of  acquisition, 
training  capability. 

2.  (a)  Select  toe  median  value  for  Doint  estimates, 
(b)  Use  entire  range  for  sensitivity. 

3.  Discuss  with  TRADOC  or  the  cognizant  PM  the  range 
of  values  for  the  protection  level  (Q)  which  are 
of  interest.  Factors  to  be  considered  include 
mission  criticality,  allowable  delay  time, 
ability  to  "cannibalize". 

4.  (a)  Select  median  value  for  point  estimates. 

(b)  Use  entire  range  for  sensitivity. 

5.  Normally  will  be  an  output  value  rather  than 
an  input,  and  will  be  calculated  for  various 
postulated  levels  of  h.  If,  however,  the  logistic 
system  is  inventory  limited,  may  be  specified 
for  each  comoonent.  At  the  concept  stage  a 
nominal  value  for  Wk  may  be  obtained  from  the 
cognizant  PM  or  TRADOC.  Factors  to  be  considered 
include  the  probable  MTBF  for  the  component, 

and  its  cost,  size  and  weight.  A range  of  values 
of  may  also  be  considered,  as  a first  step 
toward  optimizing  the  overall  mix  of  to  obtain 
highest  Q for  a given  spares  budget. 

6.  Enter  values  of  h,  W,  Q and  T in  tabular  form  for 
later  use  (see  Figure  1.4). 

Computer  Programming  Sjmmary 

None  required. 
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All  terms  defined  in  Glossary,  Appendix  A. 


FIGURE  1.4.  WORKSHEET  FOR  DETERMINATION  OF  LOGISTIC 
SUPPORT  PARAMETERS 
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DETERMINATION  OF  OPERATIONAL  USE  PARAMETERS 
Problem  Description 

The  operational  use  parameters  describe  the  conditions  under  which  a sys- 
tem will  be  deployed.  Particular  parameters  for  input  to  AMSEC  include  v_,  t, 
t,  gj  and  Rg.  Here  it  is  assumed  that  "nominal"  operating  and  environmental 
stresses  will  hold.  If  these  stresses  fall  outside  of  the  nominal  operating 
range,  the  effect  will  be  entered  through  changes  in  the  life  characteristics  or 
maintainability  parameters.  AMSEC  can  accept  inputs  of  v,  t,  r,  p,  and  Rc  on 
the  basis  of  average  values,  and  deal  with  the  entire  span  of  system  use  over 
which  these  averages  are  assumed  to  hold. 

Usually  v is  considered  as  a running  variable  and  component/ system  degrada- 
tion in  RMAC  is  estimated  in  terms  of  age  measured  against  v.  However  each 
variable  can  be  considered  alternatively  as  being  fixed  or  variable. 

Analysis  Procedure 

1.  Discuss  with  TRADOC  and/or  cognizant  PM,  the  way 
in  which  the  system  is  to  be  used  under  existing 
concepts.  Factors  to  be  considered  include: 

a.  The  plan  for  use:  what  frequency  of  missions? 

How  long  between  missions?  Planned  service, 
life?  Arrival  pattern  of  missions.  (AMSEC 
currently  assumes  the  missions  are  periodic-, 

an  extension  to  address  random  mission  arrivals 
can  be  added  in  the  future). 

b.  Mission  type:  duration  (t) , component  utilization 
during  mission  (p^) . Mission  type  is  currently 
held  fixed  for  AMSEC;  an  extension  to  multiple 
mission  types  can  be  added. 

c.  Criticality  of  mission--considered  under  cost 
o'  mission  failure. 

d.  Effect  of  constraints  placed  on  A,  R,  C 

2.  Ente**  values  for  v,  t_,  t_,  p,  and  R^  in  tabular  form 
for  later  use  (see  Table  1.5). 
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DETERMINATION  Of  SUPPORT  COST  PARAMETERS 
Problem  Description 

The  cost  of  system  support  allocatable  to  a component  is  composed  of  four 
basic  factors: 

a.  The  cost  of  material,  that  is.  the  end  cost  of 
the  component  to  the  user,  including  costs  of 
acquisition;  delivery,  storage  and  interim 
servicing;  testing,  and  preparation  for  use. 

b.  The  cost  of  labor  ($/hr)  involved  in  actual 
removal /repair  activities.  This  includes  routine 
handling. 

c.  The  cost  of  non-routine  handling  for,  e.g.,  a 
system  that  Called  In  use  and  had  to  be  air- 
lifted back  to  depot  for  maintenance. 

d.  The  cost  of  failure  over  and  above  the  cost  of 
replacing  the  failed  component.  This  can  be  thought 
of  as  the  cost  of  unreliability,  plus  the  cost 

of  unavailability,  and  may  include,  for  example, 
crash  damage,  loss  of  life,  or  loss  of  a mission. 

Each  cost  factor  can  be  sub-categorized  in  terms  of  the  particular  mode  of 
failure/removal  to  which  the  cost  is  applicable.  The  problem  here  is  to  formulate 
a cost  profile  for  each  component,  based  on  these  four  factors,  from  the  best 
available  sources  of  information.  At  the  concept  stage,  the  availability  of  much 
of  the  relevant  data  will  deDend  upon  whether  the  component  is  "off-the-shelf"  or 
is  a new  design. 

Analysis  Procedure 

1.  ^or  each  subsystem/component  under  investigation, 
determine  if  it  is  a new  design  or  is  "off-the-shelf". 

2.  (a)  If  it  is  "off-the-shelf",  investigate  availability 
of  existing  cost  records  through  cognizant  PM  or  other 
source.  If  available  follow  procedures  for  appropriate 
stage  o'  development. 

(b;  Ix  rot  "off-the-shelf"  or  if  cost  data  are  not 
ava'lab’o,  o-cceed  to  Step  3 below. 
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3.  Obtain  existing  documentation  on  component 
cost  parameters  and/or  estimates  from  PM  and 
from  Procurement. 

4.  Conduct  discussions  with  the  cognizant  PM 
cost  analysts  and  Procurement  Specialists. 

These  discussions  should  be  structured,  first 
to  bracket  the  parameter  value  in  question, 
then  to  narrow  the  bracket  as  much  as  possible. 

Factors  to  be  considered  include  changes  in 
material  acquisition  costs  and  in  labor  rates; 
changes  in  design  modularity/accessibility 

for  components;  identification  of  the  line  or  shop 

replaceable/repairable  units  (LRU,SRU);  availability 

of  special  tools/equipment;  delivery  method  to  be  used, 

and  impact  of  component  failure  on  safety,  mission  success,  by  mode. 

5.  Prepare  matrix  of  sources  vs.  cost  data  and 
enter  estimates  (see  Figure  1.6). 

6.  Prepare  estimates  of  priority  to  be  assigned  to 
different  sources,  and  enter  on  worksheet. 

7.  Enter  selected  value  of  each  parameter.  This 
will  normally  be  the  value  corresponding  to  the 
highest  priority  source.  If  a different  value 
is  selected,  enter  reason  for  such  selection  as 
an  exhibit. 

Computer  Programming  Summary 

None  required. 


— NOTE:  Where  data  are  available,  the  replacement  cost  of  the  component  can 
be  modified  to  show  the  cost  as  an  overhaul  cost/repair  cost/new  component 
cost  composite,  to  reflect  actual  inventory  make  up. 
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FIGURE  1.6.  WORKSHEET  FOR  DETERMINATION  OF  COST  PARAMETERS 
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SECTION  I 
CHAPTER  2 

INPUT  PARAMETERS— DESIGN  AND  DEVELOPMENT  STAGE 


INTRODUCTION 

During  the  design  and  development  stage  the  system  configuration  becomes 
firmer.  Specific  component  features  are  chosen,  a preliminary  maintenance  plan 
is  established,  and  dialogue  with  TRADOC  begins  to  impact  on  downstream  plans- 
for-use.  Engineering  studies  are  carried  out,  and  early  estimates  of  reliability, 
availability  and  maintainability  are  documented  in  the  MEADS  and  related  docu- 
ments. A certain  amount  of  testing  is  carried  out  at  the  component  and  subsystem 
level,  and  new  full-system  test  plans  are  advanced. 

From  this  growing  mass  of  engineering  analysis  output,  it  is  possible  to 
review,  update  and  gradually  supplant  the  data  obtained  at  the  concept  stage. 

The  procedures  for  parameter  estimation  at  the  design  and  development  stage 
parallel  those  at  the  concept  stage,  the  difference  being  that  the  weight  of 
evidence  is  swinging  away  from  broad  statements  of  engineering  judgment,  require- 
ments definitions  and  experience  with  generically  related  components;  instead  it 
is  swinging  toward  more  definitive  information  about  the  specific  system  itself. 
The  PM  and  his  contractors  become  the  major  data  sources. 

The  problem  at  this  point  becomes  one  of  collecting,  sorting  and  organizing 
the  data  which  become  available  during  design  and  development,  drawing  the  rele- 
vant parameter  estimates  from  that  data,  and  determining  the  relative  validity 
of  those  estimates  comoared  with  those  developed  at  earlier  stages  or  from 
generically  related  systems. 
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DETERMINATION  CF  SYSTEM  CONFIGURATION  PARAMETERS 
Problem  Description 
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The  problem  at  this  stage  is  to  obtain  the  most  accurate  possible  statement 
of  each  of  the  system  configuration  parameters,  based  on  the  totality  of  informa- 
tion available  in  the  cften  rapidly  changing  environment  of  design  and  development. 
The  sources  of  data  at  this  point  are  design  drawings  and  functional  block  diagrams, 
engineering  studies,  and  limited  tests. 

It  is  important  that  the  design  configuration  be  identified  down  to  the  sub- 
system/component level  at  which  removal  actions  take  place  for  repair  or  pre- 
ventive maintenance.  The  specific  subsystems  which  are  required  for  a mission, 
and  the  amount  of  redundancy,  depend  both  on  the  complexity  and  rigor  of  the  mission 
and  on  whether  the  analyst  is  interested  in  maximum  performance,  degraded  perform- 
ance or  safety. 

The  requirement  at  this  stage  is  to  determine  the  parameter  values  N,  n^,  X^, 
and_XJ^,  and  to  define  the  interrelated  reliability  logic  for  the  N subsystems  and 
the n ^ components,  for  each  type  of  mission  assignment.  For  a full-capability  mis- 
sion, for  example,  an  aircraft  with  two  engines  will  require  the  operational  use  of 
both,  so  that  they  wou^  be  shown  in  series  logically.  For  purposes  of  safety,  how- 
ever, a single  engine  nay  be  able  to  provide  a sufficient  aircraft  viability,  so  that 
in  this  case  the  two  ergines  would  be  shown  in  parallel.  Other  components  (e.g. , 
weapon  system)  will  not  be  shown  at  all,  if  they  are  not  required  for  aircraft  safety 
under  the  particular  nvssions  of  interest. 

Analysis  Procedure 

1.  Obtain  design  logic  diagrams  from  the  cognizant 
PM;  obtain  work-unit  breakdown  from  contractor 
MEADS. 

2.  Obtain  updated  mission  concepts  from  the  cognizant 
PM  or  TRADOC  and  designate  components  required 
for  different  defined  missions. 

3.  Lay  out  subsystem  reliability/availability  block 
diagrams  for  different  missions.  Group  into 
major  functions,  each  of  which  is  required  for 
the  specified  mission  and  thus  are  in  series 
'ogically.  Indicate  functional  or  component 
redundancy  within  these  blocks  (see  Figure  1.7). 


FIGURE  1.7.  RELIABILITY  LOGIC  STRUCTURE  FOR  SYSTEM  CONFIGURATION 

(Illustrative  Only) 
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4.  Prepare  matrix  of  configuration  data  elements 
vs.  mission  type  (see  Figure  1.8). 

5.  Discuss  with  PM  the  range  of  values  of  interest 
to  Army  in  sensitivity  study.  Tabulate  results 
using  form  similar  to  Figure  1.8. 

Computer  Programming  Summary 

A program  has  been  developed  by  AVSCOM-LS  to  provide  logic  block  diagrams 
directly  from  LSA/MEA  data  tapes.  However  this  must  be  modified  to  fit  specific 
mission  under  investigation. 
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Configuration  Maximum  Reduced 

Parameters  Capability  Capability  Safety 


— All  terms  are  defined  in  Glossary,  Appendix  A. 


FIGURE  1.8.  WORKSHEET  FOR  IDENTIFYING  SYSTEM  CONFIGURATION  PARAMETERS 
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DETERMINATION  Oc  COMPONENT  LIFE  CHARACTERISTIC  PARAMETERS 
Problem  Description 

In  its  operational  life  a component  is  subjected  to  various  operational 
and  environmental  stresses  which  may,  singly  or  in  combination,  degrade  the 
ability  of  the  component  to  perform  until  that  ability  falls  below  an  acceptable 
threshold.  At  that  time  the  component  is  said  to  have  failed.  The  dominant 
stresses  which  must  be  considered  include,  e.g.,  operating  overload,  calendar 
time,  operating  time,  operating  miles,  or  rounds,  and  such  environmental  stresses 
as  temperature  and  humidity.  If  one  assumes  that  the  system  is  properly  used, 

. i 

the  prevailing  functional  arguments  for  failure  usually  relate  to  the  duration 
of  the  operational  hazards.  Failure  of  the  component  may  occur  in  any  of  several 
modes,  e.g.,  breaks  or  open  circuits,  excessive  wear,  jamming,  etc. 

The  life  characteristics  of  a component  can  be  expressed  in  terms  of  the 

probability  distribution  for  surviving  each  mode  as  a function  of  the  dominant 

hazard.  Usually,  where  wearout  is  a factor,  two  parameters  will  be  required  to 

define  this  distribution  with  sufficient  accuracy,  e.g.,  the  mean  time  between 

failure  (MTBF)  and  the  probability  of  surviving  half  the  MTBF,  P(MTBF/2),  for 
t h 

the  i mode  of  failure.  Where  failures  occur  randomly,  an  estimate  of  the  MTBF 
is  sufficient. 

At  the  design  and  development  (D/D)  stage,  engineering  estimates  of  component 
characteristics  are  documented,  both  in  MEADS  and  in  associated  RAM  documentation. 

These  data,  coupled  with  limited  bench  test  results  at  the  component/subsystem 

level  will  represent  the  best  of  current  thinking,  and  when  available  they  should 

be  considered  for  updating  the  component  life  estimates  obtained  during  the  concept  stage. 

The  basic  problem  is  to  draw  together  the  relevant  D/D  data,  to  assess  its 

adequacy  relative  to  the  concept  stage  data,  and  to  select  the  currently  "best" 

information. 

As  indicated  earlier,  AMSEC  provides  for  consideration  of  either  one  or  two 
"stages"  of  hazard  exposure  within  a given  failure  mode  (see  page  23). 

Analysis  Procedure 

1.  Draw  together  existing  engineering  documentation 
of  component  parameters  showing  failure  parameters 
by  mode  of  failure.  Data  sources  include  both  the 
cognizant  PM  and  contractor. 

LL 


2.  Enter  this  documentation  in  matrix  form  (see 
Figure  1.9)  'or  comparative  presentation  along 
with  any  existing  data  from  concept  stage 
(see  Figure  1.2). 

3.  Select  "best'1  value  for  each  parameter.  Factors 
to  be  considered  include: 

a.  Extent  of  experience  behind  concept-stage 
estimates. 

b.  Validity  of  concept  stage  data  from  generically 
similar  subsystem;  extent  of  similarities  in 
design,  use. 

c.  Quality  of  data  from  D/D,  e.g.,  depth  of 
analysis,  extent  of  tests,  consistency  of 
test  results,  similarity  of  test  environment 
to  use  environment. 

d.  If  parameters  are  not  available  yet  by  mode, 
enter  single  value  for  all  modes  of  failure. 

4.  Discuss  with  PM  the  range  of  values  of  interest 
to  the  Army  in  sensitivity  studies.  Tabulate 
results,  using  form  similar  to  Figure  1.9. 

Computer  Programming  Studies 

None  required. 
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DETERMINATION  OF  COMPONENT  MAINTENANCE/MAINTAINABILITY  CURVES  AND  PARAMETERS 
Problem  Description 

The  maintainability  of  a component  describes  the  ability  of  the  maintainer, 
of  specified  skill  level,  to  detect  and  diagnose  a failed  component,  and  to  take 
the  appropriate  replacement/repair  actions.  Design  features  such  as  accessibility 
and  monitorabi'Mty  must  be  considered,  as  well  as  availability  of  skills,  special- 
ization of  too’s  and  equipment  required,  and  training  capability.  Relevant  main- 
tainability parameters  include  a,  J,  y2»  A and_h.  The  parameter  the  distri- 

bution of  removal /renewal  time  once  acTion  is  initiated  Y^U)  is  composed 
of  several  sub-elements,  e.g.,  time  to  inspect,  time  to  repair,  and  gap  times  while 
waiting  for  parts,  for  appropriate  skills  or  for  tools.  Relevant  maintenance  para- 
meters deal  with  the  features  of  policy  (e.g.,  y-j  » fg)  and  the  status  of  skills, 
tools  and  equipment  provided. 

At  the  design  and  development  stage,  the  LSA  documentation  is  becoming  avail- 
able, which  provides  preliminary  quantitative  estimates  of  the  average  value  of  y 2k ‘ 
Current  documentation  requirements  do  not  call  for  estimation  of  the  full  distribu- 
tion of  y2|<>  or  for  estimates  of  a,  J,  y-j  and  _6.  Consequently,  a major  source  of 
parameter  estimates  during  D/D  will  be  structured  engineering  discussions,  similar 
to  those  during  the  concept  stage  (see  p-  28). 

Analysis  Procedure 

J 

1.  Collect  existing  information  bearing  on  the  M 
parameters  f~om  both  PM  and  contractors.  This 
will  usually  provide  improved  estimates  of  the 
expected  value  of  y2|<- 

2.  Conduct  engineering  discussions  with  PM-logistics 
and/or  contractors  to  obtain  improved  estimates 
of  Y2k  distribution,  and  estimates  of  mean  values 
for  a,  B,  Yi , 6. 

3.  Bring  forward  data  from  concept  stage  (see  Figure  1.3). 

4.  Enter  all  data  into  new  matrix  (Figure  I. 10)  for 
comparative  oresentation. 

5.  Select  "host"  value  for  each  parameter.  Factors 
to  bo  considered  include: 

a.  Extent  of  experience  behind  concept  stage  estimates. 
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b.  Validity  cf  concept  stage  data  from 
generically  similar  subsystems  (e.g., 
extent  of  similarity  in  design  and 
use,  and  amount  of  data). 

c.  Quality  of  data  from  D/D,  e.g.,  depth 
of  analysis,  extent  of  tests,  consist- 
ing of  test  results. 

d.  Where  no  data  are  available,  or  quality 
is  highly  dubious,  enter  a priori  values 
of  a=l , 3=0,  y-j=1,  6=1 ; estimate  mean 
value  of  Y2|<- 

6.  Discuss  with  PM  the  range  of  values  of  interest 
to  the  Army  in  sensitivity  studies.  Tabulate 
results  using  form  similar  to  Figure  I. 10. 

Computer  Programming  Studies 
None  required. 
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DETERMINATION  OF  LOGISTIC  SUPPORT  PARAMETERS 
Problem  Description 

The  logistic  complex  which  supports  a fleet  of  operating  systems  is 
comprised  of  the  entire  chain  of  functions  from  production  and  acquisition  to 
shipping,  storage/inventory,  handling,  inspection  and  preparing  for  use.  These 
functions  all  have  as  their  ultimate  objective  the  supplying  of  necessary  skills  and 
components  to  keep  the  fleet  in  a required  state  of  readiness.  The  figures  of 
merit  for  the  logistic  system  include: 

a.  The  probability  that  the  fleet  support  spares 
inventory  will  be  sufficient  to  satisfy  all 
demands  over  a specified  period  of  time,  and 

b.  The  cost  of  the  logistic  system  allocatable  to 
the  fleet  under  consideration.  This  logistic 
cost,  is  one  component  of  the  total  cost  of 
acquiring  a component  (i.e.,  acquisition  cost  = 
cost  of  production  plus  cost  of  delivery). 

2/ 

The  top  level  parameters  - describing  the  logistic  complex  are: 

a.  The  number  of  aircraft  in  the  fleet  to  be 
supported  ( h) 

b.  The  number  of  replacements  for  the  kth  equipment 
which  are  on  hand  (W^),  and 

c.  The  statistical  protection  level  which  is  required  (Q)  for  the  fleet. 

The  three  parameters  are  interdependent,  so  that  if  two  are  given,  the  third 
can  be  calculated  through  AMSEC.  Normally  the  parameters  which  are  required  as 
input  are  h and  Q,  with  AMSEC  providing  an  estimate  of  the  spares  required  for 
each  component,  in  order  to  provide  the  specified  level  of  fleet  protection. 

■2/  It  should  be  noted  that  W,  h,  and  Q are  all  derived  variables  dependent  on 
still  more  basic  underlying  considerations.  For  example: 

• h depends  upon  acquisition  rate,  delivery  schedule,  fleet  size,  deploy- 
ment rate,  de-commissioning  rate,  crash  frequency,  enemy  vulnerability. 

• Q depends  upon  replacement  time,  allowable  downtime,  mission  criticality, 
feasible  inventory  size. 

• Wi<  depends  upon  component  failure  characteristics,  mission  profile,  plan 
for  use,  component  utilization,  delivery  time. 
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At  the  D/D  stage  the  values  of  h and  Q should  be  much  better  definitized 
than  at  the  concept  stage,  if  only  because  the  system  configuration  and  capabil- 
ity is  better  known,  its  weaknesses  more  completely  documented,  and  the  mission/ 
environment  more  specific.  The  principal  sources  of  information,  as  at  the 
concept  stage,  will  be  the  cognizant  PM  and  TRADOC. 

Analysis  Procedure 

1.  Carry  forward  results  of  discussions  with  TRADOC 
and  with  the  cognizant  PM  at  the  concept  stage  to 
determine  probable  range  of  values  of  H and  Q 
(see  p.32). 

2.  Review  these  earlier  findings  with  the  cognizant 
PM  and  TRADOC  to  assess  current  validity.  New 
factors  to  be  considered  include  relevant  system 
findings  during  D/D,  changes  in  plans  for  acquisi- 
tion, deployment  and/or  field  use. 

3.  Update  or  modify  ps  required.  Use  median  value 
for  point  estimates;  use  entire  range  for 
sensitivity. 

4.  Enter  findings  in  matrix  from  worksheet  (refer  to 
Figure  1.4)  for  final  review  prior  to  entry  into 
AMSEC. 

Computer  Programming  Summary 

None  required. 
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DETERMINATION  O'7  OPERATIONAL  USE  PARAMETERS 
Problem  Description 

The  operational  use  parameters  describe  the  conditions  of  frequency  and 
urgency  under  which  the  system  will  be  deployed.  Particular  parameters  for 
input  to  AMSEC  include  v,  t,  t,  p,  and  R^.  Here  it  is  assumed  that  "nominal" 
operating  and  environmental  stresses  will  hold.  If  these  stresses  fall  outside 
of  the  nominal  operating  range,  the  effect  will  be  entered  through  changes  in 
the  life  characteristics  or  maintainability  parameters.  AMSEC  can  accept  inputs 
of  v,  t,  t,  p,  and  Rc  on  the  basis  of  average  values,  and  deal  with  the  entire 
span  of  system  use  over  which  these  averages  are  assumed  to  hold;  or  it  can 
accept  different  missions,  different  component  utilization,  and  different  allowed 
times  between  missions  for  investigation  of  alternative  scenarios. 

Usually  v is  considered  as  a running  variable  and  component/ system  degrada- 
tion in  RMAC  is  estimated  in  terms  of  age  measured  against  v.  However  each 
variable  can  be  considered  alternatively  as  being  fixed,  or  as  a variable. 

At  the  D/D  stage  the  operational  use  parameters  should  be  more  definitized 
than  at  the  concept  stage,  because  the  system  capability  is  better  known 
and  its  range  of  possible  field  uses  have  been  more  thoroughly  explored.  The 
principle  sources  of  information,  as  at  the  concept  stage,  will  be  the  cognizant 
PM  and  TRADOC. 

Analysis  Procedure 

1.  Carry  forward  results  of  discussions  with  TRADOC 
and  with  the  cognizant  PM  at  the  concept  stage  to 
document  the  then-current  plans  for  use. 

2.  Review  these  earlier  findings  with  the  cognizant 
PM  and  with  TRADOC  to  assess  current  validity. 

New  factors  to  be  considered  include  relevant  sys- 
tem findings  during  D/D,  changes  in  deployment, 
newly  determined  environmental/logistic  constraints. 

3.  Update  or  modify  as  required. 

4.  Enter'  selected  values  in  tabular  form  (see  Table  1.11). 

Computer  Programming  Summary 

None  required. 
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DETERMINATION  OF  SUPPORT  COST  PARAMETERS 


Problem  Description 

The  cost  of  system  support  allocatable  to  a component  is  composed  of  four 
basic  factors: 

a.  The  cost  of  material,  that  is,  the  end  cost  of 
the  component  to  the  user,  including  costs  of 
acquisition;  delivery,  storage  and  interim 
servicing;  testing,  and  preparation  for  use. 

b.  The  cost  of  labor  ($/hr)  involved  in  actual 
removal /repair  activities.  This  includes  routine 
handl ing. 

c.  The  cost  of  non-routine  handling  for,  e.g.,  a 
system  that  failed  in  use  and  had  to  be  air- 
lifted back  to  depot  for  maintenance. 

d.  The  cost  of  failure  over  and  above  the  cost  of 
replacing  the  failed  component.  This  can  be  thought 
of  as  the  cost  of  unreliability,  plus  the  cost 

of  unavailability,  and  may  include,  for  example, 
crash  damage,  loss  of  life,  or  loss  of  a mission. 

Each  cost  factor  can  be  sub-categorized  in  terms  of  the  particular  mode  of 
failure/removal  to  which  the  cost  is  applicable.  The  problem  here  is  to  formulate 
a cost  profile  for  each  component,  based  on  these  four  factors,  from  the  best 
available  sources  of  information.  At  the  concept  stage,  the  availability  of  much 
of  the  relevant  data  will  depend  upon  whether  the  component  is  "off-the-shelf"  or 
is  a new  design. 

Analysis  Procedure 

1.  For  each  subsystem/component  under  investigation, 
determine  if  it  is  a new  design  or  is  "off-the-shelf". 

2.  (a)  If  it  is  "off-the-shelf",  investigate  availability 
of  existing  cost  records  through  cognizant  PM  or  other 
source.  If  available  follow  procedures  for  appropriate 
stage  of  development. 

(b)  If  not  "off-the-shelf"  or  if  cost  data  are  not 
available,  proceed  to  Step  3 below. 
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Obtain  existing  documentation  on  component 
cost  oarameters  and/or  estimates  from  the 
cognizant  PM,  from  Procurement,  and  from 
contractor  sources. 

Conduct  discussions  with  PM  cost  analysts  and 
Procurement  specialists.  These  discussions 
should  be  structured,  first  to  bracket  the 
parameter  value  in  question,  then  to  narrow 
the  bracket  as  much  as  possible.  Factors  to 
be  considered  include  changes  in  consumer  price 
index  and  in  labor  rates;  changes  in  design 
modularity/accessibility  for  components;  avail- 
ability of  special  tools/equipment;  delivery 
method  to  be  used,  and  impact  of  component 
failure  on  safety,  mission  success,  by  mode  of 
failure. 

Prepare  matrix  of  sources  vs.  cost  data  and  enter 
estimates  (see  Figure  1.12). 

Prepare  estimates  of  priority  to  be  assigned  to 
different  sources,  and  enter  on  worksheet. 

Enter  selected  value  of  each  parameter.  This 
will  normally  be  the  value  corresponding  to  the 
highest  priority  source.  If  a different  value 
is  selected,  enter  reason  for  such  selection  as 
an  exhibit. 
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TABLE  1.12  WORKSHEET  FOR  DETERMINATION  OF  COST  PARAMETERS 


Data  Source 


Cost 

Parameter 


Source  priority 


Component  1 

Labor  cost  per 
man  hour 

PM  removal 

KT  failure 

Of,  Mode  1 

1 2 
[ . 


Material  Cost 

Service 

PM  removal 

H/T  failure 

CM,  Mode  1 
2 
3 


Component  2 


Procurement 


Selected 
Nominal  Value 


L_ 
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CHAPTER  3 

INPUT  PARAMETERS— FIELD  TESTING  STAGE 


INTRODUCTION 

The  field  testing  phase  of  a system  development  represents,  in  a sense, 
a final  (or  near  final)  step  in  the  development  process.  The  design  configur- 
ation at  this  point  is  essentially  constrained  to  prevent  major  modifications. 

A maintenance  concept  has  been  implemented  which,  although  it  may  change  in 
some  particulars  as  the  system  becomes  operational,  at  least  recognizes  the  fact 
that  such  major  factors  as  component  design,  accessibility,  maintainer  skills, 
and  the  nature  of  diagnostic  and  other  special  equipment,  have  also  become  less 
subject  to  significant  change. 

The  field  testing  itself  has  as  a major  objective  the  generation  of  data 
which  permits  a more  objective  estimation  of  system  performance  capability  and 
of  RAM  parameters.  Consequently  it  is  of  critical  importance  that  the  field  tests 
be  designed  for  the  most  efficient  production  of  the  necessary  data  base. 

The  Reliability,  Availability,  Maintainability,  Logistics  (RAM/LOG)  Data 
System  — has  been  designed  and  implemented  for  the  collection  and  processing  of 
development/test/operational  data.  RAM/LOG  is  specifically  tailored  to  develop- 
ing the  data  necessary  for  RAM  evaluation  and  for  management  control  through 
AMSEC.  If  the  data  collection  during  field  testing  is  based  on  these  particular 

^ TR  9-9.  Structure  of  Int.earat.pd  RAM  Data  Base  for  UTTAS,  9 October  1975, 

Prepared  for  U.S.  Amy  Aviation  Systems  Command. 
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RAM/LOG  forms  and  procedures,  estimates  of  the  relevant  AMSEC  parameters  will 
be  routinely  provided  by  the  algorithms  associated  with  the  data  system.  If 
a less  comprehensive  data  system  is  used  during  the  test  phase,  special  process- 
ing procedures  may  be  required,  and  some  of  the  RAM-related  parameters  may  not 
be  documented  at  all. 

The  procedures  for  parameter  estimation  at  the  field  test  stage  differ  from 
those  at  the  concept  and  design  stages  in  that  actual  in-use  behavior  has  been 
documented.  For  the  first  time  in  the  development  process,  it  is  possible  to 
draw  from  these  documented  observations  direct  estimates  of  component  failure 
parameters  and  component  repair/maintenance  times.  However  the  data  may  be  of 
limited  value  if  the  number  of  such  observations  is  too  limited.  Consequently 
the  problem  facing  the  analyst  at  the  test  stage  is: 

1.  The  development  of  parameter  estimates  from 
test  observations,  and 

2.  The  decision  as  to  whether  to  use  these  esti- 
mates to  supplement  the  earlier  estimates,  to 
accept  them  in  conjunction  with  the  earlier 
estimates,  or  to  disregard  them. 

The  following  pages  describe  the  analysis  process  for  each  element  of  input 

data. 


DETERMINATION  OF  SYSTEM  CONFIGURATION  PARAMETERS 


Problem  Description 

As  field  testing  begins  on  a system,  the  configuration  for  design  and 
support  is  essentially  fixed  and  should  be  fully  documented  in  the  contractors 
work  breakdown  structure  and  the  MEA  documents.  In  addition  the  various 
missions  anticipated  for  the  system  in  operational  use  should  be  defined  and 
the  overall  plan  for  use  and  the  support  plan  should  be  laid  out.  These  latter 
parameters  can  be  changed  depending  on  the  findings  during  the  test  phase;  the 
configuration  parameters  can  also  be  varied  through  the  engineering-change  pro- 
cess but  the  range  of  feasible  variation  is  more  limited. 


The  objective  at  this  stage  is  to  document  the  final  system  values  of  N, 
and  X'L  and  the  interconnection  logic  for  each  of  the  various  mission 


types  under  consideration,  and  to  determine  those  parameters  which  may  be  subject 
to  review  through  the  ECP  route. 


Analysis  Procedure 


1 . 


2. 


3 


4. 


Obtain  updated  design  logic  diagrams  from 
the  cognizant  JW;  obtain  updated  work  break- 
down structure  from  contractor  MEADS. 

Obtain  updated  mission  concepts  from  PM  or 
TRADOC,  and  designate  components  required 
for  different  specified  missions. 

Lay  cut  subsystem  R/A  block  diagrams  for 


different  missions.  Group  subsystems  into 
major  functional  groups,  each  of  which  is 
required  for  the  specified  mission,  and  thus 
are  in  series  logically.  Indicate  sub-func- 
tional or  component  redundancy  within  these 
major  groups  (see  Figure  1.7  for  illustration). 
Prepare  matrix  of  configuration  data  elements 
vs.  mission  type  (see  Figure  1.8  for  illustration). 


I 


) 
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Discuss  with  PM  the  major  configurational 
parameters;  tabulate  results  using  form 
similar  to  Figure  1.8. 


Computer  Programming  Summary 


A program  has  been  developed  to  provide  logic  block  diagrams  from  LSA  data 
tapes.  However,  this  must  be  modified  to  fit  the  specific  mission(s)  under 
investigation. 


* 


S 


I 
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DETERMINATION  OF  COMPONENT  LIFE  CHARACTERISTIC  PARAMETERS 


Problem  Description 


During  the  system  test  phase,  each  component  will  be  subjected  to  the  opera- 
tional and  environmental  stresses  of  an  in-use  environment.  As  a result,  fail- 
ures may  be  expected,  with  follow-on  repair  or  renewal  before  the  system  can 
continue  in  fully  effective  operation.  In  principle,  if  testing  continues  long 
enough,  each  component  will  experience  a time-sequence  of  use-removal -repair/ 
replacement-continued  use.  Each  removal/renewal  will  have  a specified  reason,  the 
reasons  so  specified  including  both  modes  of  actual  failure  and  administrative  or 
other  causes.  If  the  removals  are  documented  by  cause,  and  the  intervening  opera- 
tion of  the  system  is  documented  by  type  and  duration  of  missions,  then  it  follows 
that  parameter  estimates  can  be  derived  describing  the  distribution  of  time-to- 
removal , (or  miles,  rounds,  etc.)  by  component  and  by  reason  for  renewal. 


The  degree  of  usefulness  of  these  estimates  will  depend  on  two  major  test 
characteristics: 

1.  The  representativeness  of  the  test  environ- 
ment^) to  the  environments  surrounding  later 
operation  of  the  system,  and 

2.  The  extent  that  coverage  and  duration  of  the 
test(s)  leads  to  sufficient  precision  and 
accuracy  of  parameter  estimates  for  insertion 
into  AMSEC  in  determining  RMAC  for  the  later 
operational  phase. 


If  both  conditions  hold,  the  test-derived  estimates  may  be  used  to  supplant  the 
estimates  obtained  during  earlier  stages.  If  they  do  not  hold,  or  hold  partially, 
then  a decision  must  be  made  as  to  whether  to  retain  the  earlier  estimates, 
modify  them  or  supplant  them. 


Analysis  Procedure 


The  following  procedures  represent  steps  taken  by  the  AMSEC  data  transducer, 
to  convert  empirical  data  on  component  removals  by  reason,  or  failure  mode,  to 
the  cc'-^esoonding  estimates  of  life  characteristic  parameters  for  entry  into  the 
AVSEC  RVAC  vcdel . These  procedures  comprise  a combination  of  manual  and  computer 


steps. 


L 


■ 


For  each  component  being  tested: 

1.  Determine  dominant  failure  argumeht  tor  end 
subsystem/component--e.g. , time,  flight  hours,  rounds. 

2.  Determine  tine  to  removal  by  cause,  including  prior 
operating  tine,  if  any. 

3.  Create  histogram  with  time  intervals  sufficiently 
small  to  depict  removal  frequency  curve 

4.  Creating  say  v intervals  to  cover  the  span  of 

test  time,  record  n..,  the  number  of  renewals 
th  ' J 

for  j cause  in  i th  interval  i=l,...,v  and 
n.j  the  number  of  renewal  for  all  causes  in  the 
interval . 

5.  Insert  the  n,.'s  and  n^'s  in  AMSEC  computer 
algorithm  to  determine  estimates  of  survival 
probability  by  cause,  viz. , ^j(it) , i=l,...v 

6.  Plot *Rj (it) 's  on  Weibull  probability  paper— ^ 

other  suitable  plotting  paper  to  determine  failure 

distribution  parameters  for  insertion  into  AMSEC. 

(See  Figure  1.13  for  illustrative  plot.  ) 

Computer  Programming  Summary 

Step  5 has  been  automated,  to  separate  a totality  of  empirical  observa- 
tions of  renewal  into  estimates  of  renewal  distributions  by  reason  for  renewal. 
The  mathematics  underlying  this  algorithm  are  presented  in  Appendix  B. 


*1/ 

— Weibull  probability  paper,  obtainable  from  most  engineering  supply  stores, „ 
i s de'si cred  so  that  any  distribution  having  a Weibull  form  l-F(t)  = e-A  t 
will  lie  in  a straight  I^ne.  If  plots  on  Weibull  are  non-linear  (Rj(it),  (it)} 
point  pairs  can  be  used  to  establish  linear  segment  curves  (probability)  for 
direct  insertion  irv:o‘ AMSEC. 
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DETERMINATION  Or  COMPONENT  MAINTENANCE/MAINTAINABILITY  (M/M)  PARAMETERS 
Problem  Description 

Field  test  results  with  respect  to  measurement  of  M/M  parameters  will  tend 
to  confirm  or  deny  ear'ier  estimates  derived  from  LSA’s,  special  studies  and 
proposed  equipment  support  plans  during  design  and  development.  An  important  as- 
pect in  M/M  measurement  during  test  is  the  human  element.  Properly  motivated 
maintenance  personnel  with  suitable  skill  level (s)  will  produce  results  (e.g., 
repair  times,  etc.)  reflecting  what  is  potentially  achievable  under  field  operat- 
ing conditions.  However,  in  considering  parameters  whose  values  rest  importantly 
on  human  attitudes,  it  is  necessary  to  project  those  attitudes  into  the  field 
environment  under  which  it  is  expected  that  the  system  will  be  operated  and 
maintained.  To  proceed  otherwise  may  be  to  introduce  serious  bias  in  the  esti- 
mating of  the  M/M  parameters,  thus  leading  to  erroneous  forecast  of  system  opera- 
tional readiness. 

Analysis  Procedure 

The  following  procedures  represent  steps  taken  by  the  AMSEC  data  transducer 
to  convert  empirical  data  on  field  maintenance  actions,  as  documented  either  by  the 
i^  component,  depending  on  whether  the  component  is  in  a failed  or  non-failed  state 
when  maintenance  commences. 

1.  Sort  maintenance  actions  by  component,  and  within 
that  category  by  type  of  problem  which  required 
maintenance. 

2.  For  each  action,  list  total  calendar  time  required 
for  maintenance  action  and  total  man-hours. 

3.  Sub-categorire  each  maintenance  time/man-hours 
into  its  elemental  parts  which  are  of  interest  in 
analysis,  e.g.,  time  waiting  for  parts,  time  to 
diagnose,  man-hours  to  remove/replace,  etc. 

4.  Discuss  with  M/M  engineers  the  extent  to  which 
these  estimates  would  represent  field-use  capa- 
bility; modiry  estimates  as  appropriate. 

5.  Arrange  maintenance  times  in  order  of  increasing 
duration;  compute  fraction  of  observations  reflect- 
ing maintenance  time  less  than  a prescribed  time 
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for  use  in  determining  g(T)  and  Y2(t),  the  prob- 
abilities respectively  that  cm  and  pm  will  be 
accomplished  in  t or  less  time. 

6.  Determine  operating  times  between  preventive 
maintenance  actions.  Sort  actions  requiring 
component  renewal  from  those  in  the  nature  of 
service,  e.g.,  lubrication. 

7.  Rank-order  operating  times  between  PMs  resulting 
in  component  renewal,  e.g.,  remove/replace. 

8.  Compute  fraction  of  times  less  than  prescribed 

times  for  estimation  of  y^(t),  the  probability 

of  renewal  of  a non-failed  component  which  has 

5/ 

been  operating  for  time  t.  — 

9.  Determine  frequency  of  service  type  actions  per 
operating  hour. 

Computer  Programming  Summary 

The  computational  process  for  estimating  distributions  from  a series  of 
observations  of  a. 


f P , fg  or  h is  the  equivalent  of  that  for  calculating 


1 2j.  \ _ 

the  distribution  of  survival  probability  (p.  62).  If  the  distribution  is  assumed 
to  be  Weibull,  the  appropriate  parameters  can  be  determined  by  the  use  of  Weibull 
graph  paper,  as  shown  on  page  63.  The  process  is  being  automated  for  application 
on  an  ongoing  program  by  AVSCOM,  and  will  be  available  for  use. 


- Note:  The  maintenance  plan  for  a component  may  call  for  a renewal  at  some 
prescribed  cperating  time  if  failure  of  the  component  does  not  intervene. 

To  the  extent  that  rield  testing  follows  the  maintenance  plan  directive 
y,{t)  will  behave  as  a step  function,  i.e.,  if  t < t0,  i ( t ) = 0;  at  t = t0 
Yi(t)  =1.  It  may  not  be  necessary  to  record  actual  times  between  PM 
renewals  but  rather,  through  documentation,  to  verify  that  the  prescribed 
time  (t0)  for  PM  renewal  is  being  observed. 
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DETERMINATION  OF  LOGISTIC  SUPPORT  PARAMETERS 
Problem  Description 

The  logistic  complex  which  supports  a fleet  of  operating  systems  is  com- 
prised of  the  entire  chain  of  functions  covering  support  material  and  personnel 
associated  with  production,  acquisition,  shipping,  storage/inventory,  handling, 
inspection  and  preparation  of  system  for  use.  These  functions  all  have  as  their 
ultimate  objective  the  supply  of  personnel  and  component  inventories  sufficient 
to  keep  the  fleet  in  a required  state  of  preparedness.  The  figures  of  merit 
for  the  logistic  system  are: 

a.  Fleet/organizational  readiness: 

What  fraction  of  systems  are  ready  to  accomplish 
defined  missions  of  interest? 

What  fraction  of  systems  are  not  ready  to  accomplish 
defined  missions  of  interest  because  of: 

1.  Support  material  deficiencies,  e.g., 
insufficient  spare  parts 

2.  Support  personnel  or  equipment  deficiencies, 
e.g.,  lack  of  necessary  skill  level  to 
maintain  necessary  component(s ) . 

b.  Fleet  support  cost  with  respect  to: 

1.  Personnel  direct  and  indirect  man-hours 
for  support. 

2.  Material  acquisition. 

The  top  level  parameters  - describing  and  influencing  the  logistic  complex  are 

a.  The  number  of  systems  in  the  fleet  to  be 
supported  (hj. 

b.  The  number  of  missions  (v)  per  system. 

c.  The  duration  (t)  of  mission. 

— It  should  be  noted  that  these  parameters  are,  in  general,  derived  variables 
dependent  on  still  more  basic  underlying  considerations:  For  example: 

• h depends  upon  acquisition  rate,  delivery  schedule,  fleet  size,  deploy- 
ment rate,  decommissioning  rate,  crash  frequency,  enemy  vulnerability. 

e Q depends  upon  replacement  time,  allowable  downtime,  mission  criticality, 
feasible  inventory  size. 

t W’k  depends  upon  component  failure  characteristics,  mission  profile,  plan  for 
use,  component  utilization,  delivery  time. 
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d.  Lead  times  for  spare  parts  requisition  (T). 

e.  The  number  of  replacements  for  the  equip- 

ment (W|<). 

f.  The  protection  levels  for  each  type  component 
part  (Q). 

The  values  of  W,  h,  and  Q usually  refer  to  the  operational  use  environment. 
H and  Q,  as  the  independent  parameters,  were  defined  roughly  during  earlier 
stages.  During  the  test  stage  some  refinement  in  these  earlier  estimates  may  be 
made,  based  on  test  findings,  and  it  is  important  to  review  the  question  with  PM 
logistics  and  TRADOC. 

Analysis  Procedure 

1.  Carry  forward  results  of  discussions  with  TRADOC 
and  with  PM  at  the  concept  and  D/D  stages  to 
determine  probable  range  of  values  of  h and  Q 

2.  Review  these  earlier  findings  with  the  cognizant 
PM  and  TRADOC  to  assess  current  validity.  New 
factors  to  be  considered  include  relevant  system 
findings  during  test,  changes  in  plans  for  acquisi- 
tion, deployment  and/or  field  use. 

3.  Update  or  modify  as  required.  Use  median  value 
for  point  estimates;  use  entire  range  for 
sensitivity. 

4.  Enter  findings  in  matrix  form  worksheet  (refer  to 
figure  I. 10)  for  final  review  prior  to  entry  into 
AMSEC. 

Computer  Programming  Summary 

None  required. 
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DETERMINATION  OF  OPERATIONAL  USE  PARAMETERS 
Problem  Description 

The  operational  use  parameters  describe  the  conditions  of  frequency  and 
urgency  under  which  the  system  will  be  deployed.  Particular  parameters  for 
input  to  AMSEC  include  v,  t,  t,  o,  and  R^.  Here  it  is  assumed  that  "nominal" 
operating  and  environmental  stresses  will  hold.  If  these  stresses  fall  outside 
of  the  nominal  operating  range,  the  effect  will  be  entered  through  changes  in 
the  life  characteristics  or  maintainability  parameters.  AMSEC  can  accept  inputs 
of  £>  1*  1*  £»  and  Rc  cn  the  basis  of  average  values,  and  deal  with  the  entire 
span  of  system  use  over  which  these  averages  are  assumed  to  hold;  or  it  can 
accept  different  missicns,  different  component  utilization-,  and  different  allowed 
times  between  missions  for  investigation  of  alternative  scenarios. 

Usually  u is  considered  as  a running  variable, and  component/ system  degrada- 
tion in  RMAC  is  estimated  in  terms  of  age  measured  against  v.  However  each 
variable  can  be  considered  al ternatively  as  being  fixed,  or  as  a variable. 

Preliminary  values  of  the  operational  use  parameters  will  have  been  defined 
at  earlier  stages  of  development;  however,  during  the  field  testing  stage  certain 
modifications  and  updates  in  these  parameters  may  be  expected,  since  the  cap- 
ability of  the  system  and  mission  interests  may  have  changed.  It  is  important 
to  review  these  earlier  parameter  definitions  with  the  primary  sources  of  such 
information--the  cognizant  PM  and  TRADOC--and  make  the  necessary  updates. 

Analysis  Procedure 

1 . Carry  forward  results  or  discussions  with  TkAuul 
and  with  the  cognizant  PM  at  the  concept  stage  to 
document  the  then-current  plans  for  use. 

2.  Review  these  earlier  findings  with  the  cognizant 
PM  and  with  TRADOC  to  assess  current  validity. 

New  factors  to  be  considered  include  relevant  sys- 
tem findings  during  D/D,  changes  in  deployment, 
newly  determined  environmental/logistic  constraints. 

3.  Update  or  moc i fy  as  required. 

A.  Enter  selected  values  in  tabular  form  (see  Table  1.11). 

Computer  Programming  Summa ry 

None  required. 
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DETERMINATION  OF  SUPPORT  COST  PARAMETERS 
Problem  Oescrioti on 

The  cost  of  system  support  allocatable  to  a component  is  composed  of  four 
basic  factors: 

a.  The  cost  of  raterial , that  is* the  end  cost  of 
the  component  to  the  user,  including  costs  of 
acquisition;  delivery,  storage  and  interim 
servicing;  testing,  and  preparation  for  use. 

b.  The  cost  of  labor  ($/hr)  involved  in  actual 
removal /repair  activities.  This  includes  routine 
handling. 

c.  The  cost  of  ron-routine  handling  for,  e.g.,  a 
system  that  failed  in  use  and  had  to  be  air- 
lifted back  to  depot  for  maintenance. 

d.  The  cost  of  failure  over  and  above  the  cost  of 
replacing  the  failed  component.  This  can  be  thought 
of  as  the  cost  of  unreliability,  plus  the  cost 

of  unavailability,  and  may  include,  for  example, 
crash  damage,  loss  of  life,  or  loss  of  a mission. 

Each  cost  factor  can  be  sub-categorized  in  terms  of  the  particular  mode  of 
failure/remova'  to  which  the  cost  is  applicable.  The  problem  here  is  to  formulate 
a cost  profile  for  each  component,  based  on  these  four  factors,  from  the  best 
available  sources  of  information.  At  the  concept  stage,  the  availability  of  much 
of  the  relevant  data  will  deoend  upon  whether  the  component  is  "off-the-shelf"  or 
is  a new  design. 

Analysis  Procedure 

1.  For  each  subsystem/component  under  investigation, 
determine  if  it  is  a new  design  or  is  "off-the-shelf". 

2.  (a)  If  it  is  "off-the-shelf",  investigate  availability 
of  existing  cost  records  through  cognizant  PM  or  other 
source.  If  available  follow  procedures  for  appropriate 
stage  of  development. 

(b)  Ir  not  "cff-the-shelf"  or  if  cost  data  are  not 
available,  proceed  to  Step  3 below. 
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equipment,  labor  skills  required  for  mainten- 
ance, as  determined  during  tests;  changes 
in  mission  use  and  hence  on  component  failure 
cost;  changes  in  failure  mode  distribution, 
and  thus  on  expected  failure  cost;  changes  in 
price  indices. 

3.  Enter  revised  parameter  estimates  in  matrix 

form  (e.g.,  Table  1.12  or  equivalent)  for  later 
entry  into  AMSEC. 

Computer  Programming  Summary 


None  required. 
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CHAPTER  4 

INPUT  PARAMETERS- -OPERATIONAL  USE  STAGE 


INTRODUCTION 

Operational  use  represents  the  final  stage  of  the  system  life  cycle.  The 
design  has  been  established,  except  for  a limited  number  of  engineering  changes 
which  may  be  considered.  A maintenance  program  is  in  being  which,  although  it 
may  be  changed  in  some  details  to  improve  cost-effectiveness,  recognizes  that 
such  major  factors  as  component  design,  special  equipment,  available  skills,  etc. 
have  been  fixed.  Tests  have  been  completed  so  that  as  operational  use  begins, 
the  best  possible  data  base  is  available. 

On  the  basis  of  this  backlog  of  experience  with  system  characteristics,  the 
Army  must  now  decide  how  it  is  going  to  use  the  system  in  the  field,  which  design 
changes  make  sense,  and  what  maintenance  plan  is  most  cost-effective.  This  will 
be  a learning  process,  starting  with  projected  parameter  values  at  the  beginning 
of  operational  use,  and  modifying  these  values  as  experience  in  the  actual  use- 
environment  is  gained.  Consequently  it  is  of  critical  importance  that  the  use 
experience  be  carefully  documented  to  support  this  learning/decision  process. 

The  Reliability,  Availability,  Maintainability,  Logistics  (RAM/ LOG)  Data 
System  — ^ was  designed  for  the  collection  and  processing  of  development/ test/ 
operational  data.  Specifically,  it  will  develop  the  data  necessary  as  inout 
*or  RAM  evaluation  and  for  management  control  through  AMSEC.  If  the  data 
collection  during  operational  use  is  based  on  the  RAM/LOG  forms 

- TR  9-9,  Structure  of  Integrated  RAM  Data  Base  for  UTTAS,  9 October  1975. 
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and  procedures,  estimates  of  the  relevant  AMSEC  parameters  will  be  routinely 
provided  by  the  algorithms  associated  with  the  data  system.  If  a less  compre- 
hensive data  system  is  used  during  system  operation,  special  processing  pro- 
cedures may  be  *'equirec,  and  some  of  the  RAM-related  parameters  may  not  be  docu- 
mented at  all. 

The  procedures  for  parameter  estimation  at  the  operational  use  stage  resemble 
those  at  the  test  phase,  and  in  a sense  represent  simply  an  extension  of  the  "test" 
experience  into  a more  realistic  environment.  As  in  the  test  phase,  parameter 
estimates  can  now  be  drawn  from  actual  documented  observations,  rather  than  from 
engineering  estimates  or  generic  experience.  Also,  as  in  the  test  phase,  the 
data  may  be  of  limited  value  if  the  number  of  such  observations  is  too  limited. 
Consequently  the  problem  facing  the  analyst  at  the  operational  use  stage  is  two- 
fold: 

1.  The  development  of  parameter  estimates  from  actual 
field-use  observations,  and 

2.  The  decision  as  to  whether  to  use  these  estimates 
to  supplement  the  earlier  estimates,  to  accept 
them  in  conjunction  with  the  earlier  estimates, 
or  to  disregard  them. 

The  following  pages  describe  the  analysis  process  for  each  element  of  input 

data. 
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DETERMINATION  OF  SYSTEM  CONFIGURATION  PARAMETERS 
Problem  Description 

Starting  the  operational  phase,  the  system  design  configuration  is  essentially 
fixed.  It  has  been  fully  documented,  first  in  the  contractors  work  breakdown 
structure  and  the  ISA  documents,  and  later  in  changes  introduced  during  develop- 
ment or  as  a result  of  testinq.  In  addition  the  various  missions  anticipated  for 
the  system  in  operational  use  have  been  defined  and  the  overall  plan  for  use  and 
the  support  plan  have  been  laid  out.  These  latter  parameters  are  based  on  the 
latest  findings  during  the  test  phase  and  can  be  varied  as  operating  experience 
indicates.  The  configuration  parameters  can  also  be  varied  through  the  engineer- 
ing-change process  but  the  range  of  feasible  variation  is  limited. 

The  objective  at  this  stage  is  to  document  the  final  system  values  of  N, 
n^,  X^,  and  X'^  and  the  interconnection  logic  for  each  of  the  various  mission 
types  under  consideration,  and  to  determine  those  parameters  which  may  be  subject 
to  review  through  the  ECP  route. 

Analysis  Procedure 

1.  Obtain  updated  design  logic  diagrams  from  PM; 
obtain  updated  work-breakdown  structure  from  final 
contractor  LSA  documentation. 

2.  Obtain  updated  mission  concepts  from  PM  or  TRADOC, 
and  designate  components  required  for  different 
specified  missions. 

3.  Lay  out  subsystem  R/A  block  diagrams  for  different 
missions.  Group  subsystems  into  major  functional 
groups,  each  of  which  is  required  for  the  specified 
mission,  and  thus  are  in  series  logically.  /Indicate 
sub-functional  or  component  redundancy  within  these 
major  groups  (see  Figure  1.7  for  illustration). 

4.  Prepare  matr-'x  of  configuration  data  elements  vs. 
mission  type  (see  Figure  1.8  for  illustration). 

5.  Discuss  with  PM  the  major  configurational  parameter 
candidates  for  E_CPs;  tabulate  results  using  form 
similar  to  Fioure  1.8. 
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Comp uter  Programming  Summary 

A program  has  beer  developed  to  provide  logic  block  diagrams  directly 
from  LSA  data  tapes.  However,  this  must  be  modified  to  fit  the  specific 
mission  under  investigation. 


Analysis  Procedure 

The  following  procedures  represent  steps  taken  by  the  AMSEC  data  transducer, 
to  convert  empirical  data  on  component  removals  to  corresponding  estimates  of  life 
characteristics  for  entry  into  the  AMSEC  RMAC  model. 

For  each  component  being  tested: 

1.  Determine  dominant  failure  argument  for  end  sub- 
system/comporent--e.g. , time,  flight  hours,  rounds. 

2.  Determine  time  to  removal  by  cause. 

3.  Create  histogram  with  time  intervals  sufficiently 
small  to  dep'ct  removal  frequency  curve. 

4.  Creating  say  v intervals  within  the  expected 
component  life  cycle,  record  n^j  the  number  of 
renewals  for  ,i^  cause  in  i^  interval  i=l,...v. 

Record  n. , the  number  of  renewals  for  all  causes 
in  the  interval. 

5.  Insert  the  n...’s  and  rm  s in  AMSEC  computer  algorithm 

to  determine  estimates  of  survival  probability  by  cause, 

V'  ' • ’•  2-v- 


DETERMINATION  OF  COMPONENT  LIFE-CHARACTERISTIC  PARAMFTFRS 
Problem  De s c ription 

During  the  operational  use  phase,  each  component  will  be  subjected  to  the 
coerational  and  environmental  stresses  of  the  actual  in-use  environment.  Fail- 
ures will  be  expected  as  a result  of  those  stresses,  repairs  or  renewal  will  take 
place,  and  system  operation  will  continue.  In  principle,  over  the  full  opera- 
tional life  of  the  system,  each  component  will  experience  a time-sequence  of  use- 
removal  -repair/replacenent-continued  use.  Each  removal  will  be  characteri zed  by 
a specified  reason  for  renewal,  the  reasons  so  specified  including  both  modes  of 
actual  failure  and  administrative  or  other  reasons.  If  the  removals  are  documented 
by  cause,  and  the  intervening  operation  of  the  system  is  documented  by  type  and 
duration  of  missions,  then  parameter  estimates  can  be  derived  describing  the 
distribution  of  time-to-removal , (or  miles,  rounds,  etc.)  by  component  and  by 
reason  for  renewal. 


v > > 


75 


1-4 


* 


6.  Plot  R.(it)'s  on  Weibull  probability  paper  or 

J 

other  suitable  plotting  paper  to  determine  fail- 
ure distribution  parameters  for  insertion  into 
AMSEC. 

Computer  Programming  Summary 

Step  5 has  been  automated,  to  separate  a totality  of  empirical  observa- 
tions of  renewal  into  estimates  of  renewal  distributions  by  reason  for  renewal. 
The  mathematics  underlying  this  algorithm  are  presented  in  Appendix  B. 


— If  plots  on  Weibull  are  non-linear  (R.(it),  it}  point  pairs  can  be  used 
to  establ ish  T inear  segment  curves  (probabil ity)  for  direct  insertion 
into  AMSEC. 


* 
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DETERMINATION  OF  COMPONENT  MAINTENANCE/MAINTAINABILITY  PARAMETERS 
Problem  Description 

As  operational  use  begins,  the  engineering  estimates  of  the  M/M  parameters 
will  have  been  defined  either  through  formal  LSA  reporting,  through  special 
developmental  studies,  through  the  AMSEC  dialogue  described  in  Chapter  2,  or 
through  test  results.  During  field  use,  component  removals,  replacements,  adjust- 
ments and  repairs  will  take  place  under  actual  operational  conditions.  As  sys- 
tem use  continues , more  accurate  estimates  of  the  M/M  parameters  and  their  distributions 
can  be  obtained,  which  can  then  be  used  in  AMSEC  for  system  evaluation  and  planning. 
These  estimates  of  course  may  not  hold  under  different  operating  conditions  depend- 
ing on  the  human  equation  as  reflected  in  maintenance  personnel  motivation  and 
incentive  to  perform. 

Analysis  Procedure 

The  following  procedures  represent  steps  taken  by  the  AMSEC  data  transducer 
to  convert  empirical  data  on  field  maintenance  actions,  as  documented  either  by 
RAM/LOG  or  by  other  systems,  into  estimates  for  the  values  of  maintenance  time  for 
the  ith  component,  depending  on  whether  the  component  is  in  a failed  or  non-failed 
state  when  maintenance  commences. 

1.  Sort  maintenance  actions  by  component,  and  within 
that  category  by  type  of  problem  which  required 
maintenance. 

2.  For  each  action,  list  total  calendar  time  required 
for  maintenance  action  and  total  man-hours. 

3.  Sub-categorize  each  maintenance  time/man-hours 
into  its  elemental  parts  which  are  of  interest  in 
analysis,  e.g.,  time  waiting  for  parts,  time  to 
diagnose,  man-hours  to  remove/replace,  etc. 

4.  Arrarge  maintenance  times  in  order  of  increasing 
duration;  compute  fraction  of  observations  reflect- 
ing maintenance  time  less  than  a prescribed  time 
for  use  in  determining  a(i)  and  y^Ct),  the  orob- 
abilities  respectively  that  CM  and  PM  will  be 
accomplished  in  t or  less  time. 
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5.  Determine  operating  times  between  preventive 
maintenance  actions.  Sort  actions  requiring 
component  renewal  from  those  in  the  nature  of 
service,  e.g.,  lubrication. 

6.  Rank-order  operating  times  between  PMs 
resulting  in  component  renewal,  e.g.,  remove/ 
replace. 

7.  Compute  fraction  of  times  less  than  prescribed 
times  for  estimation  of  y-j(t),  the  probability 
of  renewal  o*  a non-fa i led  component  which  has 

o/ 

been  operating  for  time  t.  — 

8.  Determine  frequency  of  service  type  actions  per 
operating  hour. 

Computer  Programming  Summary 

All  of  these  steps  have  been  programmed  for  computer  use,  to  estimate 
the  distributions  for  ct_,  y,  y?  and  the  fs  and  h values,  from  the  maintenance 
data  forms  of-  RAM/LOG.  This  program  was  documented  in  Tfl  9-12,  dated 
16  January  1976,  and  the  program  itself  was  transferred  to  AVSCOM-PA. 


- Note:  The  maintenance  plan  for  a component  may  call  for  a renewal  at  some 
prescribed  operating  time  if  failure  of  the  component  does  not  intervene. 
To  the  extent  that  ^ield  testing  follows  the  maintenance  plan  directive 
y-(t)  will  behave  a?  a step  function,  i.e.,  if  t < tQ,  y-j(t)  = 0,  at  t = t0 
Y-j(t)  = 1.  It  may  not  be  necessary  to  record  actual  times  between  PM 
renewals  but  rather  through  documentation  to  verify  that  the  prescribed 
time  (t0)  *or  PM  rerewa1  is  beirg  observed. 
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determination  of  logistic  support  parameters 

Problem  Description 

The  logistic  complex  which  supports  a fleet  of  operating  systems  is  com- 
prised of  the  entire  chain  of  functions  covering  support  material  and  personnel 
associated  with  production,  acquisition,  shipping,  storage/inventory,  handling, 
inspection  and  preparation  of  system  for  use.  These  functions  all  have  as  their 
ultimate  objective  the  supply  of  personnel  and  component  inventories  sufficient 
to  keep  the  fleet  in  a required  state  of  preparedness.  The  figures  of  merit 
for  the  logistic  system  are: 

a.  Fleet/organizational  readiness: 

What  fraction  of  systems  are  ready  to  accomplish 
defined  missions  of  interest? 

What  fraction  of  systems  are  not  ready  to  accomplish 
defined  missions  of  interest  because  of: 

1.  Support  material  deficiencies,  e.g., 
insufficient  spare  parts 

2.  Support  personnel  or  equipment  deficiencies, 
e.g.,  lack  of  necessary  skill  level  to 
maintain  necessary  component(s) . 

b.  Fleet  support  cost  with  respect  to: 

1.  Personnel  direct  and  indirect  man-hours 
for  support. 

2.  Material  acquisition. 

The  top  level  parameters  ^ describing  and  influencing  the  logistic  complex  are: 

a.  The  number  of  systems  in  the  fleet  to  be 
supported  (h) . 

b.  The  number  of  missions  (v)  per  system. 

c.  The  duration  (t)  of  mission. 


It  should  be  noted  that  these  parameters  are,  in  general,  derived  variables 
dependent  on  still  more  basic  underlying  considerations:  For  example: 

• h depends  upon  acquisition  rate,  delivery  schedule,  fleet  size,  deploy- 
ment rate,  decommissioning  rate,  crash  frequency,  enemy  vulnerability. 

o 0 depends  upon  replacement  time,  allowable  downtime,  mission  criticality, 
feasible  inventory  size. 

**  Wv  deoends  uocn  component  failure  characteristics,  mission  profile,  plan  for 
use,  component  utilization,  delivery  time. 
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d.  Lead  times  for  spare  parts  requisition  (T). 

e.  The  number  o " replacements  for  the  k*^  equip- 
ment W^. 

f.  The  protection  levels  for  each  type  component 
part  (Q). 

The  values  of  W,  h,  and  Q usually  refer  to  the  operational  use  environment. 

H and  Q,  as  the  independent  parameters,  were  defined  roughly  during  earlier 
stages.  During  the  operational  stage  some  refinement  in  these  earlier  estimates 
may  be  made,  based  on  actual  use  findings,  and  it  it  important  to  review  the  question 
with  PM  logistics  and  with  the  field  commander. 

Analysis  Procedure 

1.  Carry  forward  results  of  discussions  with  TRADOC 
and  with  PM  at  the  concept  and  D/D  stages  to 
determine  probable  range  of  values  of  H and  Q. 

2.  Review  these  earlier  findings  with  the  cognizant 
PM  and  with  -Held  commander  to  assess  current 
validity.  New  factors  to  be  considered  include 
relevant  system  findings  during  field  use, 
changes  in  pans  for  acquisition,  deployment, 
and  tactical  use. 

3.  Update  or  modify  as  required.  Use  median  value 
for  point  estimates;  use  entire  range  for 
sensitivity. 

4.  Enter  findings  in  matrix  form  worksheet  (refer  to 
Figure  I. 10)  for  final  review  prior  to  entry  into 
AMSEC. 

Computer  Programming  Summary 

None  required. 
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DETERMINATION  Oc  OPERATIONAL  USE  PARAMETERS 
Problem  Description 

The  operational  use  parameters  describe  the  conditions  of  frequency  and 
urgency  under  which  the  system  will  be  deployed.  Particular  parameters  for 
input  to  AMSEC  include  v,  t_,  t_,  p_,  and  R^.  Here  it  is  assumed  that  "nominal" 
operating  and  environmental  stresses  will  hold.  If  these  stresses  fall  outside 
of  the  nominal  operating  range,  the  effect  will  be  entered  through  changes  in 
the  life  characteristics  or  maintainability  parameters.  AMSEC  can  accept  inputs 
i>,  t,  i,  p,  and  R^  on  the  basis  of  average  values,  and  deal  with  the  entire 
span  of  system  use  over  which  these  averages  are  assumed  to  hold;  or  it  can 
accept  different  missions,  different  component  utilization,  and  different  allowed 
times  between  missions  for  investigation  of  alternative  scenarios. 

Usually  v is  considered  as  a running  variable  and  component/ system  degrada- 
tion in  RMAC  is  estimated  in  terms  of  age  measured  against  v.  However  each 
variable  can  be  considered  alternatively  as  being  fixed,  or  as  a variable. 

Preliminary  values  of  the  operational  use  parameters  will  have  been  defined 
at  earlier  stages  of  development;  however,  during  the  operational  use  stage  certain 
modifications  and  updates  in  these  parameters  are  to  be  expected,  since  the 
capability  of  the  system  is  now  completely  documented,  mission  interests  are  better 
defined,  and  environments  are  now  known  or  more  fully  understood.  It  is  important 
to  review  these  earlier  oarameter  definitions  with  the  primary  sources  of  such 
information--the  cognizant  PM,  TRADOC,  field  commander--and  make  necessary  updates. 

Analysis  Procedure 

1.  Carry  forward  results  of  discussions  with  TRADOC 
and  with  the  cognizant  PM  at  the  testing  stage  to 
document  the  then-current  plans-for-use. 

2.  Review  these  earlier  findings  with  the  cognizant  PM, 
with  TRADOC  and  with  the  operational  commander,  to 
assess  current  validity.  New  factors  to  be  considered 
include  relevant  system  findings  during  test,  changes 
in  deployment  and  tactics. 
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3.  Update  or  modify  as  required. 

4.  Enter  selected  values  in  tabular  form  (see 
Table  I. 11). 

Computer  Programming  Summary 


None  required. 
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DETERMINATION  0':  SUPPORT  COST  PARAMETERS 
Problem  D e s c r i_p tio n 

The  cost  of  system  support  allocutablo  to  a component  is  composed  o(  four 
basic  factors: 

a.  The. cost  of  material,  that  is,  the  end  cost  of 
the  component  to  the  user,  including  costs  of 
acquisition;  delivery,  storage  and  interim 
servicing;  testing,  and  preparation  for  use. 

b.  The  cost  of  labor  ($/hr)  involved  in  actual 
removal /repair  activities.  This  includes  routine 
handl i ng. 

c.  The  cost  of  non-routine  handling  for,  e.g.,  a 
system  that  failed  in  use  and  had  to  be  air- 
lifted back  to  depot  for  maintenance. 

d.  The  cost  of  failure  over  and  above  the  cost  of 
replacing  the  failed  component.  This  can  be  thought 
of  as  the  cost  of  unreliability,  plus  the  cost 

of  unavailability,  and  may  include,  for  example, 
crash  damage,  loss  of  life,  or  loss  of  a mission. 

Each  cost  factor  can  be  sub-categorized  in  terms  of  the  particular  mode  of 
fai lure/ removal  to  which  the  cost  is  applicable.  The  problem  here  is  to  formulate 
a cost  profile  for  each  component,  based  on  these  four  factors,  from  the  best 
available  sources  of  information.  At  the  concept  stage,  the  availability  of  much 
of  the  relevant  data  will  deoend  upon  whether  the  component  is  "off-the-shelf"  or 
is  a new  design. 

Analysis  Procedure 

1.  For  each  subsystem/component  under  investigation, 
determine  if  it  is  a new  design  or  is  "off-the-shelf". 

2.  (a)  If  it  is  "off-the-shelf",  investigate  availability 
of  existing  cost  records  through  cognizant  PM  or  other 
source.  If  available  follow  procedures  for  appropriate 
stage  of  development. 

(b)  If  not  "off-the-shelf"  or  if  cost  data  are  not 
available,  proceed  to  Step  3 below. 
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anticipated  through  ECPs;  changes  in  special  tools, 
equipment,  labor  skills  required  for  maintenance 
as  determined  during  tests;  changes  in  mission 
use  tactics  and  hence  on  component  failure  cost;  changes 
in  failure  mode  distribution,  and  thus  on  expected 
failure  cost;  changes  in  price  indices. 

3.  Enter  revised  parameter  estimates  in  matrix  form 
(e.g. , Table  1.12  or  equivalent)  for  later  entry 
into  AMSEC. 

Computer  Programming  Analysis 
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SECTION  II 

USE  OF  RMAC  EVALUATION  MODEL 
INTRODUCTION 


Once  input  parameter  values  have  been  established  (see  Section  I),  opera- 
tion of  the  AMSEC  RMAC  Model  can  begin.  Inputs  will  vary  in  degree  of  defini- 
tion and  precision  as  the  development  program  proceeds.  However,  their  use  in 
the  RMAC  evaluation  process  follows  the  same  steps  in  the  Concept  Stage,  the 
Design  and  Development  Stage,  the  Test  Stage  or  the  Operational  Use  Stage. 
Consequently  the  organization  of  Section  II  is  not  broken  down  by  Chapters  for 
different  stages  of  development,  but  rather  is  a single  Chapter  describing  the 
implementation  of  the  model  in  detail. 

The  input  and  output  formats  are  described,  along  with  the  procedures  for 
entering  the  data  into  the  computer.  The  analytic  formulation  of  AMSEC,  and  the 
documentation  of  the  computer  program  is  discussed  in  Appendix  C.  The  cards 
for  the  program  have  been  provided  to  AVSCOM-PA  under  separate  cover. 

A full  illustrative  printout  from  the  model,  showing  the  output  values  for 
system  and  component  RMAC  and  spares , and  the  expected  change  of  these  parameters 
with  system  use  is  provided  in  Appendix  D.  Specialized  analysis  outouts  are 
orovided  as  accompaniment  to  the  text  in  Section  III. 
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CHAPTER  1 
RMAC  MODEL 

CONCEPT,  DEVELOPMENT,  TEST  AND  USE  STAGES 


INTRODUCTION 


The  major  differences  in  using  AMSEC  in  the  various  stages  of  system  develop- 
ment are: 

a.  Differences  in  output  due  to  changes  in  system 
definition  and  design  characteristics. 

b.  Differences  in  the  precision  and  accuracy  with 
which  input  data  are  established,  and 

c.  Differences  in  the  specific  AMSEC  applications 
which  are  of  concern  to  management. 

The  actual  operation  of  the  RMAC  model—i.e.,  the  calculation,  from  a given 
set  of  input  values,  of  system/component  RMAC  and  spares,  broken  down  by  mode  of  fail- 

ure/renewal--is  essentially  the  same  at  all  staqes.  The  steps  involved  are  the  following: 

1.  Collection  and  organization  of  input  parameter 
estimates  as  developed  in  Section  I,  for  each 
component 

2.  Entry  of  appropriate  parameter  estimates  onto 
input  format  for  keypunch 

3.  Keypunch  of  input  data  onto  program  cards 

4.  Specification  of  form(s)  of  outputs  desired 

5.  Entry  of  all  data  cards  into  computer  and  operation 
of  AMSEC  program  to  derive  specified  outputs  and 
printout  on  appropriate  output  formats. 

The  following  Chapter  describes  the  single-step  use  of  the  RMAC  model  in 
terms  of  these  basic  steps,  provides  illustrations  in  each  case,  and  displays 
a sample  output  for  a simple  system  configuration.  Such  a single-run  estimate 
of  RMAC  and  spares  (RMACS)  histories  is  the  basic  model  operation;  it  provides  a 
complete  evaluation  from  a set  of  single-value  inputs  for  each  parameter  specified. 

For  more  complex  management  decisions,  multiple-run  evaluations  are  required; 
these  are  described  in  Section  III. 
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As  currently  programmed,  AMSEC  can  be  excercised  in  any  of  three  optional 
modes. 

a.  It  can  deliver,  as  output,  the  component/ system 
readiness,  reliability,  and  maintainability  factors 
only.  This  option  would  apply  where  component 
cost  and  spares  output  data  is  either  unattainable 
because  of  lack  of  input  information,  or  is  simply 
not  of  interest. 

b.  It  can  provide  output  of  cost/spares  information 
only,  and 

c.  It  can  provide  a full  presentation  of  mission 
readiness  and  reliability,  together  with  material 
acquisition  and  support  costs,  and  spares. 

The  output  in  each  case  can  be  varied,  both  in  level  of  configuration  at 
which  estimates  are  provided  and  in  degree  of  analytical  detail  provided. 

Analysis  by  Type  of  Failure 

For  many  analyses,  there  is  a specific  interest  in  determining  the  frequency 
of  certain  kinds  of  system  failures  and  other  causes  for  maintenance  or  support 
actions;  or  in  estimating  the  corresponding  support  and  operating  costs. 

In  order  to  address  these  interests,  AMSEC  has  been  extended  to  categorize 
and  array  system  maintenance  actions  in  terms  of  (a)  service,  (b)  preventive 
maintenance,  (c)  transportation  and  handling  failure,  (d)  maintenance  induced 
failures,  and  (e)  mission  failures.  Mission  failures  are  further  broken  down 
into  categories  called  critical  (e.g.,  failures  hazarding  system  viability  or 
safety),  major  (e.g.,  failures  which  prevent  or  seriously  compromise  chances 
of  mission  success),  or  minor  {e.g.,  failures  which  have  little  or  no  impact  on 
mission  success);  and  to  chargeable  (e.g.,  failures  stemming  from  component  design 
of  characteristics  fabrication  procedures),  vs.  non-chargeable  (e.g.,  failures 
caused  by  improper  handling  or  operation  of  the  system).  By  using  AMSEC  to  sum 
the  component  maintenance  actions  by  cause  (category)  over  all  components  we  pro- 
vide a basis  for  determining  system  support  costs  in  total  and  further  the  distri- 
bution of  the  total  to  the  various  categories  of  interest.  Cost  per  man  hour  and 
material  costs  by  failure  category  are  also  separately  tabulated,  thus  yielding  as 
output  projections  by  category  of  labor  and  material  costs. 


87 


Rev.  9/7/76 


COLLECTION  OF  INPUT  DATA 
Problem  Description 


II-l 


The  first  step  in  the  use  of  the  AMSEC  RMAC  Model  is  to  draw  together  the 
parameter  estimates  appropriate  to  the  particular  stage  of  development  of  the 
system  which  is  of  interest.  At  this  point  these  estimates  will  be  on  the  work- 
sheets, as  they  were  entered  according  to  procedures  set  forth  in  Section  I. 

They  should  be  given  a final  review  for  general  accuracy  and  applicability  to  the 
problem  at  hand,  and  any  final  modifications  made  on  the  current  copies  of  the 
worksheets. 

Analysis  Procedure 

1.  Collect  worksheets  for  each  of  the  six  input 
parameter  categories: 

a.  System  configuration  parameters 

b.  Component  life  characteristic  parameters 

c.  Component  maintainability  parameters 

d.  Logistic  support  parameters 

e.  Operational  use  parameters 

f.  Support  cost  procedures 

2.  Review  data  for  completeness  and  consistency. 

A manual  edit  of  the  worksheets  is  carried  out. 

As  a minimum,  the  following  checks  should  be  made: 

a.  Estimates  have  been  entered  for  all  pertinent 
parameters 

b.  Ranges  of  values  and  histogram  interval  has 
been  set  forth  for  parameters  requiring  a 
sensitivity  analysis 

c.  Component  mix  corresponds  to  appropriate 
mission  utilization,  and  to  portion  of  total 
system  being  analyzed 

d.  Check  individual  entries  for  reasonableness. 

3.  Check  any  discrepancies  with  cognizant  engineer/ 
analyst  and  modify  as  required 

4.  Indicate  acceptance  of  forms  by  initialing. 

Computer  Programming  Summary 

None  required. 
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ENTRY  OF  DATA  ON  SUMMARY  FORMS 
Problem  Description 


The  data  as  brought  forward  on  the  worksheets  must  now  be  aggregated  into 
a summary  format  for  convenience  in  reviewing  and  keypunching. 

As  a first  step,  these  input  parameters  characterized  by  a distribution  (i.e., 
a curve  or  a series  of  straight-line  segments)  must  be  examined  to  determine  if 
some  are  sufficiently  similar  that  the  same  input  can  be  used.  Curves  will  be 
assigned  a number,  and  a table-look-up  will  be  entered  into  the  computer  whereby 
each  relevant  curve  can  be  called  up  by  addressing  the  appropriate  number. 

After  a table  of  curve  forms  (see  Figure  II. la)  has  been  completed,  the  data 
on  the  six  worksheets  should  now  be  transferred  onto  a summary  form  (see 
Figure  II. lb,  c).  This  form  is  double-indexed  to  show  both  the  worksheet  name 
of  the  data  element  being  entered  from  worksheet,  and  the  keypunch  blocks  to 
be  used  on  the  cards. 

Analysis  Procedure 

1.  Develop  the  curve  table  data  from  the  component 
maintainability  and  life  characteristics  work- 
sheets. Each  unique  set  of  curve  data  are  assigned 
a number  of  the  worksheet  and  the  unique  curve  data 
points  are  entered  onto  the  curve  table  form. 

2.  Enter  each  finalized  data  element  from  worksheet 
onto  summary  format  in  appropriate  box.  Appropriate 
positions  for  placing  decimal  points  are  indicated; 
necessary  codes  (e.g.,  type  of  component  hazard 
considered  to  be  dominant)  are  also  shown. 

3.  A manual  edit  of  the  data  transfer  operation  should 
be  made,  to  assure  that  the  copy  is  error  free  and 
is  placed  in  proper  boxes. 

Computer  Programming  Summary 

None  required. 
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FIGURE  1 1. la.  SUMMARY  SHEET  FOR  CURVE  INPUT  DATA  FROM  WORKSHEETS 


All  terms  are  defined  in  Appendix  C,  pp.  C-26  thru  29. 


riGURE  1 1. lb.  SUMMARY  FORM  FOR  DATA  INPUT 


FIGURE  II.  . SUMMARY  FORM  FOR  DATA  INPUT. 
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AH  terms  are  defined  in  Glossary,  Appendix  A. 
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SUMMARY  FORM  FOR  DATA  INPUT  (Cont) 
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FIGURE  II. lie.  SUMMARY  FORM  FOR  DATA  INPUT 
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KEYPUNCH  OF  DATA  ONTO  CARDS 
Problem  Description 

The  summary  data  inputs  as  set  forth  on  the  form  shown  in  Figure  II. 1 must 
be  keypunched  for  computer  input.  This  is  a straightforward  step,  but  one 
subject  to  human  error.  A verifying  printout  of  the  inputs  by  the  computer  prior 
to  actual  computer  analysis  will  provide  a basis  for  careful  edit  of  the  inputs. 

Analysis  Procedure 

1.  Keypunch  each  block  as  entered  in  Figure  II .1 
onto  card  for  use  with  computer. 

2.  Enter  punched  cards  into  computer. 

3.  Call  for  computer  playback  of  input  data  is 
automatically  done  by  running  the  AMSEC  program 
or  the  cost-spares  model  program.  The  form  in 
which  the  inputs  are  summarized  is  the  same  as 
that  in  Figure  II. 1. 

4.  Review  computer  summary  of  inputs  vs.  manual 
summary.  Make  any  necessary  corrections  in 
keypunch. 

Computer  Programming  Summary 

The  computer  subroutine  which  provides  for  a display  printout  of  input  data 
is  a part  of  the  AMSEC  program. 
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SPECIFICATION  OF  DESIREO  OUTPUT  FORM(S) 

Problem  Description 

In  its  normal  operating  mode,  the  AMSEC  program  will  print  out,  for  each 
component,  a time-sequence  of  RMAC  and  spares  estimates  for  a period  of  v 
missions.  Aggregation  of  the  component  values  is  carried  out  to  nrovide 
system  RMAC  estimates. 

A complete, illustrative  AMSEC  printout  is  shown  in  Appendix  D for  a simple 
system  problem  as  defined  in  that  Appendix.  The  general  form  of  this  output  is 
displayed  in  Figure  1 1. 2 which  is  excerpted  from  Appendix  D. 

The  analyst  may,  depending  upon  his  particular  interest  at  the  time,  elect  to 
call  up  this  entire  output,  or  he  may  selectively  call  up  only  part  of  it.  For 
example,  he  may  not  be  interested  in  the  RMAC  change  over  time,  but  only  in  the 
steady-state  values  of  RMAC  toward  which  the  system  will  approach  with  continued 
use.  Or  he  may  only  be  interested  in  a single  specific  mission;  or  in  the  values 
of  RMAC,  but  not  in  the  spares  requirements.  While  the  computer  program  traces 
through  the  same  analysis  steps  in  each  case,  the  actual  data  printout  can  be 
controlled  and  in  many  cases  limited  to  that  information  which  is  directly 
pertinent. 

Generally,  the  total  AMSEC  operation  over  all  missions  would  be  desirable  for 
problem  solving  prior  to,  or  upon  introduction  of  a new  system  on  a component  into 
operational  use.  For  fielded  systems  which  have  been  in  use  for  a long  period  of 
time,  the  printout  for  a single  value  of  v corresponding  to  that  period  of  time 
might  be  preferrable. 

The  specification  of  output  format  must  thus  be  entered  as  an  instruction 
to  the  computer.  This  is  handled  by  the  use  of  Job  Control  Language  (JCL)  cards 
(see  Appendix  C).  : 

Analysis  Procedure 

1.  Define  limitations  on  problem  to  be  solved  by 
computer  in  terms  of; 

(a)  Mission  number(s)  of  interest 

(b)  Output  variables  (RMAC  spares)  to  be  suppressed 
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FIGURE  II. 2 (Cont) 
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MATERIAL  COST  PER  CM  8V  MODE  2000.000 
HAN  HOURS  HISS  FAIL  8Y  HCOE  10.000 
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OPERATION  OF  COMPUTER 
Problem  Description 

The  actual  AMSEC  calculations  carried  out  by  the  computer  are  fully  pro- 
grammed. The  analysis  involved  is  referenced  in  Appendix  C and  new  updated 
algorithms  set  forth;  programming  cards  have  been  provided  to  AVSCOM-PA  under 
separate  cover. 

Analysis  Procedure 

1.  All  analysis  steps  are  internal  to  the  AMSEC 
computer  program,  referenced  in  Appendix  C. 

2.  An  illustrative  printout  of  a full  AMSEC  analysis 
is  shown  for  reference  in  Appendix  D. 

Computer  Programming  Summary 

See  Appendix  C for  referral  to  programming  details. 

The  program  is  written  in  Fortran,  for  use  on  the  IBM  360  or  equivalent 
computer.  JCL  cards  are  required  for  specification  of  output  by  the  various 
computer  installations.  Capacity  limitations  of  present  program  are: 

a.  Maximum  number  of  subsystems:  None 

b.  Maximum  number  of  failure  modes  for  subsystem:  10 

c.  Maximum  number  of  missions:  5,000 

d.  Maximum  number  of  curves:  100 
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SECTION  III 

APPLICATIONS  FOR  PLANNING  AND  DECISION 
INTRODUCTION 


The  one-step  application  of  the  AMSEC  RMAC  Model  described  in  the  previous 
Section  provides  a system/component  evaluation,  in  terms  of  RMAC  and  spares, 
for  the  particular  combination  of  input  parameter  values  which  were  selected. 

The  basic  nature  of  the  management  planning  problem  is  to  examine  the  consequences 
of  alternative  combinations  of  parameters,  and  to  select  the  most  cost-effective 
combination.  AMSEC,  because  of  its  analytic  nature,  is  ideally  suited  to  a rapid 
appraisal  of  the  alternatives  presented  to  it.  The  sequence  of  alternatives  for 
evaluation  can  represent  changes  in  a single  variable,  with  others  held  constant, 
or  it  can  represent  joint  changes  in  several  variables.  Furthermore,  through 
AMSEC,  the  analyst  can  evaluate  the  trend  of  cost-effectiveness  created  by  a 
sequence  of  such  changes--in  essence,  measure  the  slope  of  a multi -dimensional 
surface— and  from  this  decide  whether  further  change  would  be  useful,  which 
parameter(s)  to  change,  and  in  what  direction.  AMSEC  can  thus  be  used  to  selec- 
tively converge  on  the  "best"  combination  of  those  variables  which  are  considered 
free  to  change,  within  the  constraints  defined  by  parameters  which  are  held  fixed. 

The  number  of  required  management  decisions  and  evaluations  to  which  AMSEC 
can  contribute  is  quite  large,  and  cuts  across  all  stages  of  the  development 
process.  A cross-section  of  these  problems  was  presented  in  Table  1,  page  3. 
Basically,  the  problems  fall  into  three  classes: 

1 . Single-step  evaluation,  an  assessment  of  RMAC  and 
spares  for  a specified  combination  of  input  para- 
meters. This  is  handled  by  a single  AMSEC  run, 
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delivering  an  output  either  in  the  ndrmal  AMSEC 
format  or  in  a special-purpose  format. 

2.  Multiple  evaluations  of  specified  alternatives,  to 
develop  values  of  RMAC/spares  for  each,  for  purposes 
of  trade-off  or  comparison. 

3.  Sensitivity  analysis  of  single  or  multiple  parameters 
to  determine  "optimal"  combinations.  This  makes  use 
of  the  AMSEC  executive  routine  to  converge  on  the 
solution;  the  process  involves  (a)  organized 
manipulation  of  input  parameter  values,  thresholds, 
etc.,  and  (b)  iterative  use  of  the  RMAC  model, 
followed  by  assessment  and  feedback. 

This  section  describes  the  application  of  AMSEC  to  a range  of  problem 
classes.  The  problems  are  organized  by  the  stage  in  the  development  process 
when  they  are  most  likely  to  be  significant.1^  In  each  case,  sufficient 
procedural  detail  and  illustrative  material  is  provided  to  permit  the  analyst 
to  set  up  and  solve  the  stated  problem,  and  further,  to  recognize  other  problems 
of  the  same  class  to  which  the  same  procedures— or  slightly  modified  procedures- 
are  applicable. 


1 ry 

- Note  that  the  same  problem  type  may  recur  during  different  stages  of  system 
development.  Where  the  analytic  approach  is  the  same,  the  problem  is  only 
discussed  once;  the  reader  is  referred  to  the  Table  of  Contents  for  a 
complete  list  of  problems  which  are  described  herein. 
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THE  BASIC  SENSITIVITY  ANALYSIS 
Single  Variable 

Many  of  the  management  applications,  occurring  at  all  stages  of  develop- 
ment, involve  the  use  of  sensitivity  analysis.  Consequently,  tefore  entering 
into  a detailed  description  of  individual  problems,  a brief  discussion  is  pre- 
sented of  the  process  involved  in  using  AMSEC  for  a basic  sensitivity  analysis. 

The  one-step  application  of  AMSEC  calls  for  entering  into  the  computer  a 
specific  value  for  each  required  input  parameter,  to  obtain  as  an  output  a 
single  value— or  history  of  values--of  R,M,A,C,  and  spares,  S,  for  each 
component  and  for  the  system.  If  all  of  the  inputs  are  held  fixed  except  the 

1.L  / 

i variable,  X-j,  and  if  a new  value  of  is  entered,  then  corresponding  new 
values,  Ri,  Mi,  A^,  Ci,  and  Si  are  generated.  By  stepping  Xi  through  a series 
of  values,  a corresponding  series  of  R,  M,  A,  C and  S is  generated  by  the 
computer,  and  the  analyst  can  measure  or  draw  curves  to  show  the  "sensitivity" 
of  each  of  the  R,  M,  A,  C,  and  S outputs  to  change  in  Xi . As  an  example. 

Figure  III .1  shows  the  sensitivity  of  cost  to  changes  in  overhaul  interval. 

Cost  in  this  case  is  defined  to  include  both  support  cost  and  mission  failure 
cost.  It  will  be  noted  that  variation  in  TBO  produces  a corresponding  variation 
in  C,  all  other  parameters  being  held  fixed.  To  obtain  the  curve,  the  value  of 
TBoll/  entered  into  AMSEC  was  progressively  varied,  in  increments  of  50  hours,  from 
0 to  500  flying  hours.  At  the  moment,  the  process  of  obtaining  a new  po.nt  on 
the  curve  involves  manually  inserting  a new  input  card  into  the  computer  showing 
the  new  value  of  the  independent  parameter,  and  carrying  out  a new  AMSEC  run  to 
obtain  new  values  of  the  outputs.  However  the  procedure  is  simple,  and  it  is 
expected  that  early  extensions  of  AMSEC  will  provide  the  sensitivity  analysis  as 
an  automatic  feature. 

— ' The  TBO  corresponds  to  the  mean  of  the  distribution,  Y-ir.(t),  as  discussed  in 
Section  I. 


TBO  (hours) 

SENSITIVITY  OF  COST  (SUPPORT  + MISSION  FAILURE)  TO  CHANGES 
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The  procedures  for  a single-variable  sensitivity  run  are  as  follows,  using 
manual  executive  routine: 

1.  Select  nominal  values  for  input  parameters  as 
described  in  Section  I. 

2.  Determine  independent  variable  of  interest,  X^ . 

3.  Determine  output  measure(s)  (R,  M,  A,  C,  S)  of 
interest. 

4.  Determine  range  of  interest  for  independent 
variable.  This  is  usually  the  range  of  feasible 
values  as  described  in  Section  I.  In  addition, 
it  is  often  useful  to  examine  the  effect  for 
X.=0  or  X^oo. 

5.  Determine  size  of  increment  for  changes  in  inde- 
pendent variable.  This  selection  represents  a 
balance  between  computer  time  and  cost  (number 
of  iterations)  for  small  increments,  and  loss  of 
accuracy  (large  granularity)  for  large  intervals. 

If  the  curve  appears  to  be  relatively  flat  or  of 
constant  slope,  the  increment  can  be  made  large; 
if  the  slope  of  the  curve  is  changing  rapidly 
the  increment  must  be  made  small  enough  to  dis- 
play the  relationship. 

6.  Identify  sequence  of  n values  of  Xj  for  entry. 

7.  Obtain  n iterations  of  AMSEC  runs,  each  with 
different  value  of  Xf. 

8.  Tabulate  or  draw  curves  to  display  results  of 
R/M/A/C/S  vs  Xv 

Steps  6,  7,  and  8 can  be  automated  in  the  future.  In  addition,  the  judge- 
mental steps  involved  in  Steps  4 and  5 can  be  laid  out  as  procedures  in  many 
cases,  and  later  automated  if  this  appears  desirable.  The  selection  of  incre- 
ment size  could,  for  example,  be  made  adaptive  depending  on  measured  slope. 

Multiple  Variables 

Changes  can  be  introduced  simultaneously  in  each  of  two  or  more  input 
variables,  and  AMSEC  will  provide  output  estimates  for  R,  M,  A,  C,  S which 
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fully  responds  to  the  interdependence  between  these  variables  and  from  which 
the  joint  sensitivity  can  be  determined.  The  procedural  steps  involved  are 
analagous  to  those  for  the  single  variable.  Computer  runs  are  made  for 
sequential  steps  in  the  first  variable,  X,  which  holding  the  second  variable 
Y fixed  of  y;  the  process  is  then  repeated  for  y = y^,  Again,  at 

present  these  procedures  which  form  a part  of  the  AMSEC  executive  routine,  are 
manually  applied. 

The  process  may  be  extended  to  three  or  more  variables,  where  the  third  is 
run  against  each  combination  of  the  first  two,  etc.  It  is  obvious  that  as  the 
number  of  variables  is  increased,  the  number  of  computer  iterations  to  carry 
out  a multivariate  sensitivity  analysis  increases  combi natori ally.  The  efficiency 
can  be  improved  by: 

a.  Analyzing  the  variables  in  order  of  decreasing 
impact  on  RMACS. 

b.  Limitation  of  range  of  interest  in  each  variable. 

c.  Keeping  incremental  steps  as  large  as  possible 
for  each  variable. 


Search  for  Optimal i tv 


A special  form  of  sensitivity  analysis  is  the  search  for  that  value  of 
the  independent  variable— or  the  combination  of  values  for  two  or  more  independent 
variables— which  will  provide  the  "best"  overall  system  configuration,  as 
reflected  in  the  R/M/A/C/S  objective  criterion.  The  above  procedures  will  pro- 
vide a rough  location  of  the  optimum,  the  accuracy  depending  upon  the  increment 
used.  Alternative  procedures,  which  can  be  readily  adapted  to  computer  program- 
ming, will  provide  a more  precise  location  of  the  optimum  point. 
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The  first  procedure  simply  extends  the  sensitivity  analysis  procedures:  * 

1.  Carry  out  single  (multiple)  variable  sensitivity 
analysis  as  described. 

2.  From  resultant  sequence  of  values  of  objective 
function  F(X)  select  two  values  of  X which  bound  the 
minimum. 

■i 

3.  Reduce  size  of  increment  and  repeat  sensitivity 

1 

analysis  over  the  restricted  range  of  X. 

-i 

An  alternative  procedure  can  be  carried  out  independent  of  the  sensitivity 
analysis. 

This  process  can  best  be  illustrated  for. the  case  of  a single  variable  and 
a unimodal  objective  function  to  be  minimized  (or  maximized),  such  as  that 
shown  in  Figure  1 1 1 . 1 . Basically  the  search  for  optimality  amounts  to  the 
following  procedure  for  a single  variable: 

1.  Select  as  starting  point  X = A,  where  A can  be  0 
(or  any  value  to  the  left  of  the  optimum). 

2.  Evaluate  objective  Y * F(A). 

3.  Evaluate  F (A  + AX)  where  A X is  a small  positive 
increment. 

3a.  Calculate  difference  F (A  + AX)  - F(A)  = D^. 

4.  Select  a second  point  X = B. 

5.  Evaluate  objective  Y = F(B). 

6.  Evaluate  F(B  + AX). 

6a.  Calculate  the  difference  F(B  + AX)  - F(B)  = Dg). 

7.  If  D changes  sign  between  A and  B select  a third 
point  C midway  between  A and  B. 

7a.  Calculate  difference  Dq  near  X = C. 

7b.  Determine  pair  AC  or  BC  between  which  D changes 
sign. 

7c.  Select  fourth  point  D interior  to  pair  determined 
in  7b. 

7d.  Continue  until  D at  selected  point  is  within  pre- 
selected proximity  to  D = 0. 

7e.  Select  value  of  objective  at  final  point  as  optimal. 

' I 
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8.  If  D does  not  change  sign  between  A and  B, 
select  a third  point  C'  exterior  to  A,  B. 

9.  Evaluate  D near  X = C'. 

10.  If  D does  not  change  sign,  continue  Step  8,9 

11.  If  D does  change  sign,  repeat  Steps  6,7 

A typical  sequence  of  steps  following  the  procedures  is  shown  in 
Figure  III. 2. 

The  multivariate  equivalent  of  this  process  follows  an  analogous  logic. 

The  starting  point  represents  a point  on  a multi-dimensional  surface,  represented 
by  variables  X-j,  X2,...Xn.  The  objective  function  Y = F(X-j,  X2...Xn)  is  at  an 
optimal  value  when  all  partial  derivatives  are  zero.  An  iterative  search  proceeds  as 
follows: 

1.  Select  as  starting  point  X-|  = A,  where  A is  to 
left  of  optimum,  and  X2,  X3...Xn  are  all  at 
nominal  values. 

2.  Conduct  single  variable  search  for  optimal  Xj  = X*1 
as  above. 

3.  Enter  X*j  as  new  nominal  value  of  X-j. 

4.  Repeat  Steps  1,  2 with  other  variables  to  locate 
X*2»  X*3,  etc.  The  point  (X-j * , X2*...Xn*)  is  a 
quasi-optimum.  However,  since  the  X.  variables  are 
interdependent,  changes  (e.g.)  in  nominal  values 

of  X2,  Xj. . .Xn  will  change  the  location  of  optimal 
X-j . Therefore, 

5.  Repeat  Steps  1-4  until  the  change  produced  in 

Y = F(Xj...Xn)  is  within  preselected  bounds.  The 
new  multi -dimensional  point  X-j**,  X2**...Xn** 
represents  the  optimal  operating  point. 

TREATMENT  OF  PLANNING  PROBLEMS 

For  many  of  the  problems  described  in  the  following  oages  of  this  Section,  the 
orocedures  have  been  automated,  and  the  relevant  computer  Drograms  are  incorporated 
directly  or  by  reference.  For  other  problems  the  process  is  semi-automatic— 
i.e.,  some  steps  are  computerized,  others  manual. 
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Finally,  some  problems  are  identified  which  have  not  yet  been  completely 
solved.  These  problems  are  important  to  the  management  and  control  of  a de- 
velopment program,  and  are  in  principle  solveable  through  the  AMSEC  formalism, 
but  some  further  extension  of  the  analytic  base  is  required.  The  problems  are 
introduced  to  give  the  reader  a sense  of  the  broad  range  of  problems  which  can 
be  addressed,  and  to  show  the  place  of  each  in  the  total  integrated  network  of 
decision/evaluation/control . 


CONCEPT  STAGE 


INTRODUCTION 

At  the  concept  stage  in  the  development  of  a complex  system,  the  major 
interests  of  management  are  in  firming  up  the  operational,  performance,  and 
cost  requirements  for  the  system,  translating  those  requirements  into  functions, 
and  the  functions  into  general  engineering  techniques  through  which  they  can  be 
implemented.  The  purpose  is  not  so  much  to  make  a firm,  definitive  parameteriza- 
tion of  the  system,  but  rather  to  establish  bounds,  define  the  limits  of  feasible 
approaches  to  the  problem  and,  in  general  define  an  "envelope"  of  parameters  with- 
in which  the  system  design,  operation  and  support  must  lie.  The  particular  train 
of  decisions  management  makes  in  bounding  the  problem  parametrically  may  have 
irreversible  consequences  which  bear  on  RMA  and  cost,  over  the  projected  life 
cycle  of  the  system.  Consequently  viewed  in  this  light,  some  decisions  are 
obviously  of  greater  importance  than  others. 

The  application  of  AMSEC  during  the  concept  stage  is  directed  toward  pro- 
viding management  with  a quantitative  basis  on  which  to  assess  his  alternatives. 
This  Chapter  describes  several  problems  which  are  typical,  and  shows  how  AMSEC 
can  be  used  in  their  solution. 
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DEFINITION  OF  SYSTEM  GOALS 
Problem  Description 

The  earliest  statement  of  requirements  for  a system  is  likely  to  be  in 
terms  of  the  performance  characteristics,  P,  which  are  desired  (e.g.,  lift,  thrust, 
carrying  capacity)  and  the  budget,  B,  available  for  its  development.  Both  of  these 
statements  will  be  tentative  at  first,  and  the  user  will  often  settle  tor  less 
performance  if  the  cost  of  achieving  it  is  "too-high",  or  he  might  ask  for  even 
higher  performance  if  later  development  shows  it  can  be  achieved  at  a reasonable 
price. 

At  this  stage  the  design  region  open  to  the  developer  is  that  shown  in 
Figure  III. 3.  Any  combination  of  P and  B that  falls  within  the  ruled 
area  is  satisfactory,  and  there  is  probably  some  room  for  negotiation,  as 
indicated  by  the  shaded  area. 

As  conceptual  thinking  progresses,  both  P and  B must  be  broken  down  into 
their  major  elements  and  goals  established  for  these  elements.  For  example, 
the  concept  of  performance  of  an  engine  may  involve  several  subsidiary  concepts, 
e.g. , 

a.  Thrust— minimum  acceptable 

b.  Missions  and  plans  for  use  for  the  engine: 

1.  Duration 

2.  Criticality 

3.  Frequency 

c.  Reliability  for  missions— minimum  acceptable 

d.  Readiness  for  missions— minimum  acceptable 

Similarly  the  cost  concept  can  be  subdivided  into: 

a.  Development  cost— maximum  acceptable 

b.  Operating  cost— maximum  acceptable 

c.  Support  cost— maximum  acceptable 

d.  Total  cost  (a+b+c)— maximum  acceptable. 

In  general,  both  sets  of  parameters  are  interdependent.  For  example,  if 
the  thrust  requirement  is  reduced,  the  development  cost  can  be  reduced,  and  the 
reliability  car  be  maintained  with  a reduced  level  of  support  cost;  similarly,  a 
required  reliability  goal  can  be  attained  either  by  increasing  the  development 
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dollars  to  buy  a larger  MTBF,  or  by  Increasing  the  support  budget  to  provide 
more  frequent  preventive  renewal/maintenance.  If  the  reliability  goal  is  set 
too  high,  the  costs  to  achieve  it  may  be  unacceptable,  and  the  user  must  settle 
for  lower  reliability  or  he  may  reduce  his  mission  requirements.  The  simple 
P-B  design  region  thus  can  be  subdivided  into  a multidimensional  design  envelope. 


At  this  point  the  application  of  AMSEC  can  be  used  to  focus  management  atten- 
tion on  the  interrelations  and  trade-offs  involved  in  formalizing  the  system 
requirements.  Several  examples  are  considered: 

A.  Setting  Reliability  Goals 
Fixed  Design 

Establishing  a reliability  goal  for  a component  (or  for  a system)  has  several 
cost  consequences,  which  may  include  any  or  all  of  the  following: 

a.  Cost  of  R&D  and  testing  to  improve  life  character- 
istics, C-j  (by  failure  mode,  if  desired) 

b.  Cost  of  enhanced  support  to  reduce  average  age 
of  component(s)  used  in  a mission,  C? 

c.  Cost  of  in-use  failure  of  component (s)(by  mode)  including 
loss  of  life,  lost  mission,  crashes,  etc.,  C3 

d.  Cost  of  additional  systems  to  meet  mission  force- 
level  requirements,  C^. 


Assuming  for  the  moment  that  the  design  remains  fixed  (i.e.,  there  is  no 
R&D  effort  to  change  the  life  characteristics  of  the  components  so  that  C-j  is  0), 
the  relations  for  C2  , C3,  and  C^  above  can  be  determined  by  AMSEC. 

1.  Enter  nominal  values  (see  Section  I)  for  all  para- 
meters into  AMSEC,  including  current  best  estimates 
for  u and  P(p/2). 

2.  Change  value  for  TBO,  and  conduct  sensitivity  analysis 
of  R and  life  cycle  support  cost,  C2  vs.  TBO. 

3.  Plot  corresponding  pairs  of  R,  C values  to  obtain 
desired  C2  vs.  R plot  for  initial  design. 

4.  From  each  of  the  j AMSEC  iterations  in  Step  2,  record R and 
corresponding  value  of  expected  number  of  mission 
failures  for  the  i^  component(s) , E^.  (by  mode  if  desired). 
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5.  Multiply  each  E.  by  K.  the  expected  cost  of  a 

failure  of  the  1 n component  in  the  m mode  during  a mission. 

Sum  over  i for  all  components  considered,  to  obtain 
C-  = Z C.  for  each  of  the  j iterations. 

i 

6.  Plot  sequence  of  values  (for  each  iteration)  of 
E.j  K.  vs.  R to  obtain  curve  C3  vs.  R for  initial 
design. 

7.  Multiply  the  assumed  value  of  R for  each  iteration 
by  N (1 -R)P/R  to  obtain  the  expected  cost  of  added 
float,  C^, where  N is  the  number  of  fleet  units 
required  to  survive  a mission,  and  P is  the  cost 
of  a unit. 

8.  Plot  vs.  R. 

The  general  form  of  these  curves  is  as  illbstfated  in  Figure  111.4(a). 
Increased  MTBF 

Now  suppose  that  design  changes  are  introduced  which  increase  the  acquisi- 
tion cost  by  an  amount  from  A to  A + AA.  The  estimate  of  added  cost  would 
normally  be  obtained  from  the  contractor.  Suppose  that  with  this  cost,  the  life 
distribution  can  be  improved  by  increasing  y by  amount  Ay,  with  P(y/2)  remaining 
unchanged.  The  AMSEC  procedures  to  obtain  C vs.  R above  are  now  repeated,  replac 
ing  y by  (y+Ay).  The  increase  in  MTBF  will  be  found  to  lower  the  support  cost 
curve--that  is,  a given  R goal  can  now  be  realized  at  reduced  support  cost.  The 
curves  representing  vs.  R and  vs.  R will  remain  the  same,  since  they  depend 
only  on  R.  The  resultant  situation  is  shown  in  Figure  111.4(b),  with  the  total 
cost  curve  from  Figure  111.4(a)  superimposed  for  comparison. 

It  will  be  noted  that  the  optimal  management  decision,  based  on  the  il lustra 
tion  shown,  is  to  proceed  with  the  new  design,  tailor  the  maintenance  plan  to 
match  it»and  select  the  corresponding  R goal.  This  will  lead  to  a least-total- 
cost  configuration,  where  the  cost  of  unreliability  is  contained  in  the  cost 
measure. 
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FIGURE  111.4(a).  COST  CONSEQUENCES  OF  ESTABLISHING  R GOAL,  PRESENT  DESIGN 
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FIGURE  111.4(b).  COST  CONSEQUENCES  OF  ESTABLISHING  R GOAL,  NEW  DESIGN 
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Increased  Weibull  MB“ 

In  a similar  way,  one  could  investigate  with  AMSEC  the  relative  advantages 
and  disadvantages  of  investing  money  to  increase  P(y/2),  while  keeping  y fixed. 

This  amounts  to  changing  the  failure  characteristics  so  that  failures  are  less 
random  and  more  clustered  around  the  mean.  In  the  limiting  case,  the  Weibull  "B" 
parameter  becomes  infinite,  and  the  failures  will  all  occur  at  exactly  the  mean. 
Renewal  of  a component  could  thus  be  planned  with  precision,  so  that  no  failures 
would  occur  during  a mission,  and  so  that  the  maximum  useful  life  is  derived  from 
the  component.  Thus  increasing  P(y/2)  while  holding  y constant  would  tend  to 
lower  the  support  cost  curve,  and  a trade-off,  similar  in  general  form  to  that  in 
Figure  III. 4,  would  result. 

B.  Setting  Component  Reliability  Limits 

The  total  cost  curves  of  Figure  I I I. 4 provide  a convenient  means  for  setting 
preliminary  limits  on  R.  It  is  obvious  that,  for  the  contractor  to  produce  an 
equipment  which  falls  below  R,  a cost  is  incurred,  e.g.,  the  cost  of  lost  missions 
and/or  additional  float  required.  If  the  total  cost  response  to  Rg  is  relatively 
flat,  a lower  limit  can  be  placed  on  Rg;  a sharp  minimum  will  impose  tight  require- 
ments on  the  contractor  meeting  Rg.  From  an  analysis  of  these  curves  the  toler- 
able limit  can  be  placed,  and  further,  the  payoff  for  an  incentive  contract  based 
on  achieving  Rg,  can  be  established. 

However  the  total  cost  curves  of  Figure  III. 4 are  developed  on  the  assump- 
tion that  the  mission  is  fixed  at  its  nominal  value,  as  input  to  AMSEC.  In  practice, 
by  reducing  these  operational  requirements,  the  cost  of  achieving  a given  relia- 
bility goal  can  be  substantially  decreased.  To  investigate  this  relation,  the 
following  procedures  apply: 

1.  Enter  nominal  values  (see  Section  I)  for  all  para- 
meters into  AMSEC. 

2.  Follow  procedures  in  Part  A to  obtain  total 
cost  vs.  Rg  curve  for  specified  nominal  value 
of  mission  duration. 

3.  Modify  mission  duration  and  repeat,  to  obtain  new 
total  cost  vs.  Rg  curve,  repeat  for  other  values  of 
mission  duration. 
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4.  Display  in  graphical  form  (see  Figure  III. 5)  for 
illustrative  diagram)  the  sequence  of  minimum 
cost  values  taken  from  the  iterations  obtained 
from  Steps  1-3.  Identify  each  with  correspond- 
ing value  of  Rq  as  shown  In  Figure  III. 5. 

The  tactical  cost  of  reducing  the  mission  requirement,  in  terms  of  Inability 
to  perform  is  difficult  to  quantify.  It  is  essentially  a matter  of  judgment. 
However,  a display  of  the  form  shown  in  Figure  I I I. 5 provides  a basis  for  dialogue 
on  the  matter.  It  presents  the  Interaction  between  design,  support  and  opera- 
tional tactics  decisions.  For  example  by  reducing  mission  time  from  the  nominal 
value  (t0)  to  a value  t^  will  result  in  a cost  savings  C*  * C (Rg  ) - C (R^). 

The  dialogue  between  the  development  PM  and  TRADOC  then  centers  around  the  ques- 
tion of  whether  the  improved  tactical  capability  represented  by  the  longer  mission 
time  is  "worth"  the  cost  C'. 

C.  Setting  Maintenance/Maintainability  Goals 

The  establishment  of  M/M  goals  can  be  viewed  as  an  analogous  problem  to 
setting  R goals,  as  described  in  A above. 

There  are  cost  consequences  involved  in  establishing  the  M/M  goal.  For 
convenience,  we  shall  focus  on  the  single  parameter  t,  describing  the  time  to 
remove/ reDl ace  the  component;  the  costs  include: 

C-|=  Cost  of  RAD  to  redesign  the  component,  e.g., 

improve  accessibility,  adapt  it  to  special  tools, 
modify  packaging,  etc. 

C2®  Cost  of  enhanced  support  to  speed  the  replacement 
process,  e.g.,  more  maintainers,  better  training, 
better  tools,  automation 

Cy  Cost  of  unreadiness  when  needed  for  mission,  e.g., 
any  special  impact  on  the  mission,  such  as  cost  of 
delay  If  any,  or  abort 

C^=  Cost  of  additional  systems  to  meet  mission  force- 
level  requirements 

The  procedures  for  analysis  follow  quite  closely  to  those  given  for  R above; 
assuming  no  RAD,  we  hold  C^  fixed.  Then, 
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FIGURE  1 1 1. 5.  EFFECT  OF  TACTICAL  REQUIREMENT  ON  PREFERRED  RELIABILIY  GOAL 


Enter  nominal  values  (see  Section  I)  for  all  para- 
meters into  AMSEC. 

Change  value  for  t and  conduct  a sensitivity  anal- 
ysis of  life  cycle  support  cost  C2  vs.  t. 

Plot  values  of  C2  vs.  x for  initial  design  (C^) 

For  each  of  j AMSEC  iterations  above,  record  t 
and  the  corresponding  value  of  availability  for 
the  ith  component,  A^. 

Multiply  the  probability  of  the  operation  being 
unready  due  to  the  ith  component,  (1-A.)  by  , 
the  expected  cost  of  that  component  not  being 
ready.  Sum  over  i for  all  components  considered, 
to  obtain  C3  = I (1-A.j)  K-  for  each  iteration. 

Plot  sequence  of  (1-A.)  vs.  x^  for  each  iter- 
ation to  obtain  C^  vs.  t for  initial  design. 

For  each  AMSEC  iteration  of  t,  select  correspond- 
ing A^  for  each  mission-sensitive  component. 

Multiply  to  obtain  Aj=  ITA-j , the  probability  that  the 
system  Is  available  for  the  mission,  assuming  that 
particular  value  of  x. 


8.  For  each  of  the  A.  corresponding  to  the  j iterations 

vl 

of  x,  calculate  N(l-A.)  P,  where  P is  the  cost  of  a 

vl 

single  system;  this  gives  the  expected  cost  C4  of  added 
float  to  provide  for  a full  consist  of  N systems 
required  for  the  mission. 
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SELECTION  OF  FUNCTIONAL  IMPLEMENTATION  METHODS 
Problem  Description 

The  initial  formulation  of  the  performance  requirements  for  a system 
specify  capability,  i.e.,  tasks  to  be  carried  out.  From  this  stage,  the  first 
engineering  task  to  be  accomplished  is  the  specification  of  functions  which 
must  be  carried  out  to  provide  that  capability.  These  functions  may  be  of  the 
form,  e.g., 

• Provide  a lift  capability  of  X pounds 

• Provide  a cargo  volume  capacity  of  y cubic  feet 

• Provide  an  air  speed  of  z knots, 

• Etc. 

In  many  cases,  a given  function  can  be  implemented  in  any  one  of  several 
ways.  For  example  aircraft  speed  could  be  provided  alternatively  by  rotor 
action  or  by  jet  engine.  At  the  concept  stage  a preliminary  assessment  of  these 
alternatives  is  required,  and  an  engineering  judgment  of  the  preferred  mode  is 
established,  which  will  hold  unless  and  until  further  design/test  information 
changes  the  verdict. 

AMSEC  can  be  used  to  provide  quantitative  insight  to  management  in  making 
this  decision.  An  example  of  this  form  of  application  is  provided  below. 

Analysis  Procedure 

As  an  example  of  the  use  of  AMSEC  in  this  decision  area,  we  shall  consider 
the  function  of  providing  aircraft  thrust,  which  can  be  accomplished  (a)  through 
the  use  of  rotors,  or  (b)  through  the  use  of  jet  engines. 

1.  Describe  alternative  configurations  which  could  be 
used, for  both  prop  and  jet  engines,  for  the  range 

of  thrust  which  is  required.  Alternative .configura- 
tions should  be  considered,  i.e., 

a.  Single  engine  to  develop  required  thrust 

b.  Multiple  engines  to  develop  required  thrust. 

2.  For  each  alternative  determine  state-of-the-art  for 
comoonent  lire  characteristics,  replacement/repair 
time  and  effort,  and  acquisition  cost.  If  all  alter- 
natives are  "off-the-shelf"  this  data  should  be  well 
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documented;  if  not,  it  may  be  obtained  by  extra- 
polation from  generically  related  systems,  or  from 
engineering  analysis  and  judgment  (see  Section  I 
for  further  discussion  of  input  data). 

Conduct  point-analysis  for  first  of  alternative 
configurations. 

Conduct  sensitivity  analysis  of  first  alternative 
with  respect  to  TBO  and  time-to-replace,  and  select 
best  operating  point  (refer  to  p.  104  for  discussion). 
Evaluate  R,  A,  C and  S at  this  point. 

Establish  a system  for  rating  the  weight  of  R,  A,  C 
and  S to  develop  a single  rating  index  for  each 
configuration.  This  step  serves  to  structure  engineer- 
ing judgment  by  setting  up  a formal  scoring  system. 

An  example  of  such  a system  is  shown  in  Figure  III. 6. 
This  format  provides  for  placing  a rating  on  each  of 
several  ranges  of  values  for  each  measure;  by  exclud- 
ing (with  an  "X")  certain  ranges  of  a measure,  the 
format  addresses  the  relative  importance  between 
different  measures  (e.g.,  an  availability  in  the  range 
.95  to  1.00  is  considered  to  have  the  same  importance 
as  a reliability  of  .75  to  .85.  Both  have  a rating  of 
3.0  in  Figure  III. 6).  The  total  score  for  each  alter- 
native may  be  taken  as  simply  the  arithmetic  sum  of 
the  ratings  as  shown;  or  one  of  the  alternatives  could 
be  excluded  if  any  rating  drops  below  (e.g.,)  1,  for  any 
measure,  etc. 

Repeat  Steps  3,  4,  and  5 for  other  alternatives. 

Select  best  of  stated  alternatives. 
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DIALOGUE  BETWEEN  USER  AND  DEVELOPER 
Problem  Description 

As  indicated  in  an  earlier  section,  during  the  concept  stage  both  the 
user's  needs  and  the  developers  capability  have  been  expressed  tentatively.  If 
either  finds  that  what  he  proposes  poses  a major  obstacle  to  the  other,  there 
should  be  a dialogue  between  the  two  with  the  intention  of  resolving  the  issue. 
The  problem  is  that  the  dialogue  either  never  takes  place,  and  the  developer  goes 
ahead  with  the  design  of  an  exhorbitantly  expensive  system  to  meet  an  over- 
stated need;  or  the  dialogue  takes  place  between  two  different  disciplines,  e.g., 
the  technician  and  engineer— who  didn't  have  a common  "language"  for  addressing 
the  problems. 

AMSEC  can  provide  the  means  for  such  a dialogue,  since  it  translates  the 
designers  engineering  proposals  into  the  tactical  consequences  which  they  would 
bring  about  for  the  user. 

The  dialogue  begins  when  the  analyst,  acting  as  "translator"  puts  the  first 
tentative  system  parameters  into  AMSEC,  and  obtains  estimates  of  field  behavior 
in  R,  M,  A,  C and  S which  may  or  may  not  meet  the  originally  stated  objectives. 

If  they  do  not,  either  the  design/support  complex  must  be  changed  or  the  field 
objectives  must  be  reduced.  To  determine  the  most  cost-effective  compromise 
requires  both  the  user  and  developer  to  state,  in  quantitative  terms,  the  reason 
for  their  position  and  the  cost— in  dollars,  safety,  or  other— of  deviating 
from  that  position.  That  is,  they  must  participate  in  a sensitivity  analysis. 

One  example  involving  a TRADOC-developer  dialogue  was  described  on  p.  114 
under  "Setting  Component  Reliability  Limits".  Another  common  example  is  the 
following. 

Suppose  the  user  has  specified  the  need  for  an  aircraft  that  will  provide 
a 500  knot  speed,  with  99 % reliability  of  completing  a 1,000  mile  mission.  The 
developer  finds  that  existing  experience  with  engines  of  the  necessary  thrust 
shows  that  they  are  only  90%  reliable  over  1,000  miles.  The  decision  to  be  faced: 
should  a development  program  be  undertaken  to  meet  the  specified  reliability 
objectives,  or  should  the  objectives  be  modified? 


Analysis  Procedure 

1.  Insert  nominal  values  of  input  parameters  into 
AMSEC  and  obtain  preliminary  values  of  R,  C. 

2.  Carry  out  sensitivity  analysis  of  R with 
respect  to  mission  length  {see  Figure  III. 7). 

The  options  for  reconciling  user  needs  with 
development  capability  are: 

a.  Reduce  reliability  target  from  Rg  to  R-j 

b.  Reduce  mission  length  from  L-j  to 

c.  Apply  R&D  to  drive  R-|  to  Rg  for  current 
target  mission,  by  changing  MTBF  and/or 
P(v/2) 

d.  Modify  support  plan  to  improve  reliability 

e.  A combination  of  (a),  (b),  (c),  or  (d). 

The  cost  of  (a)  and  (b)  or  a combination  of  (a),  (b),  in  terms  of  tactical 
capability  must  be  assessed  by  TRADOC;  the  use  of  (d)  as  an  option  was  described 
earlier.  The  cost  of  R&D  to  accomplish  the  required  improvement  in  MTBF  must  be 
estimated  by  the  developer.  Ultimately,  the  user  must  decide  which  cost(s)  govern. 

3.  Organize  options  in  order  of  increasing  cost 
to  reconcile  user/developer. 

4.  Select  least-cost  option. 

5.  The  use  of  mixed  options— i .e. , combining  two 
or  more  of  the  options,  can  also  be  evaluated 
if  cost  data  of  the  necessary  granularity  are 
available.  This  would  be  done  stepwise,  as 

f ol 1 ows : 

a.  Select  mission  length  at  LXQ  where 

*■2  < ^xo  < Ll;  read  Rx  from  s^itivity 
run.  Step  2. 

b.  Determine  cost  of  reduced  mission  length 
*"1  ^xo 

c.  Determine  cost  of  reducing  reliability  Rg-*-  Rx0 

d.  Add  (b)  J*  (c)  and  assess  total  against  results 
from  Step  3 

e.  Select  least  cost  option 

f.  Iterate  (5)  as  desired  for  other  Lx> 


FIGURE  III. 7.  ILLUSTRATIVE  SENSITIVITY  OF  R TO  CHANGES  IN 
LENGTH  OF  MISSION 


SECTION  III 
CHAPTER  2 

DESIGN  AND  DEVELOPMENT  STAGE 


INTRODUCTION 

As  the  design  and  development  of  a system  proceeds,  the  parameters  which 
describe  the  system  design,  its  support  methods  and  its  operational  use  be- 
come increasingly  well  defined.  Engineering  analysis,  failure  mode,  effects, 
and  criticality  studies,  component  breadboard  tests--all  activities  in  the 
development  process  contribute  to  this  growing  information  base. 

The  major  focus  of  management  attention  during  D/D  is  the  "proofing"  of 
the  Concept  and  the  continuing  refinement  of  the  design  details.  In  addition, 
a continuing  effort  is  being  made  to  assess  the  performance  and  R,  M,  A,  C,  S 
characteristics  which  the  system  will  exhibit  as  it  transitions  into  field  use. 
The  support  plan  which  will  be  used,  first  during  the  test  phase  and  later  in 
operational  use,  is  set  forth. 

The  following  pages  describe  AMSEC^  application  to  some  of  the  typical 
planning  problems  that  arise  during  this  stage. 
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PREDICTION  OF  IN-USE  R,  M,  A,  C,  S 
Problem  Description 

Throughout  the  development  process  it  is  important  for  management  to  have 
continually  updated  estimates  of  the  R,  M,  A,  C,  S characteristics  which  the 
system  will  have  when  it  is  completed,  and  to  examine  sensitivity  of  these  mea- 
sures to  the  critical  parameters  in  order  to  support  timely  decisions.  Periodic 
assessments  of  a formal  nature  are  required  in  response  to  (e.g.,)  MIL-STD  702-8; 
other  interim  assessments  may  be  required  on  an  ad  hoc  basis. 

Analysis  Procedure 

The  procedures  for  developing  a point  estimate  of  RMACS  were  set  forth  in 
Section  II  of  this  Handbook,  and  the  procedures  for  a sensitivity  analysis  were 
described  at  the  beginning  of  Section  III.  The  same  steps  are  followed  here,  but 
the  input  parameters  are  more  sharply  defined;  some  parameters  which  could  freely 
vary  during  concept  become  frozen  as  development  proceeds,  and  the  mix  of  para- 
meters for  which  a sensitivity  analysis  is  necessary,  will  change: 

1.  Insert  input  parameters  into  AMSEC. 

2.  Develop  system  RMACS  point  estimates. 

3.  Develop  system  RMACS  sensitivity  studies  as 
required  by  management. 

4.  Prepare  formal  evaluation  report. 

An  example  of  AMSEC  point  estimate  of  component  and  system  RMACS  is  provided  in 
Appendix  D. 

Computer  Programming  Summary 

The  insertion  of  the  results  of  an  evaluation  into  the  textual  format  of  a 
prescribed  report  such  as  Mil  STD  702-8  is  a process  which  can  be  readily  auto- 
mated. This  capability  can  be  added  as  an  AMSEC  option  and  the  computer  will  print 
out  the  entire  MIL  STD  report,  or  such  parts  of  it  as  are  desired. 
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ASSESSMENT  OF  DESIGN  ALTERNATIVES 
Problem  Description 

The  designer  is  often  faced  with  the  problem  of  selecting  between  two  or 
more  different  design  techniques  to  solve  a system  problem.  Usually  each  will 
have  its  own  peculiar  RMAC  properties  over  the  projected  life  of  the  system, 
and  AMSEC  can  be  used  to  help  determine  and  display  these  properties  for  manage- 
ment review.  Examples  of  such  decisions,  at  the  level  of  engineering  detail 
which  must  be  addressed,  include: 

• Achievement  of  MTBF  goal  for  a component  by 
"beefing  up"  the  design,  vs.  the  use  of  redundant 
units. 

• Designing  a unit  for  removal  and  repair  vs.  design 
for  throwaway. 

• Physical  packaging  (or  conceptual  "packaging") 
of  two  or  more  units  together  for  removal /repair 
vs.  retaining  separate  removal /repair  capability. 

• Use  of  "off-the-shelf"  items  vs.  development  of 
new  designs;  extent  of  standardization  in  selec- 
tion of  components. 

• Selection  of  item  source  from  competing  vendors. 

• Trade-offs  between  R and  safety;  between  false 
alarms  and  false  clears. 

• Use  of  monitoring  circuits  to  measure  condition 
as  an  aid  to  maintenance  planning. 

The  following  pages  describe  the  approach  to  be  used  in  applying  AMSEC  to  problems 
of  this  nature. 

Analysis  Procedure 

In  each  case,  the  basic  analysis  procedure  is: 
a.  To  structure  the  alternative  actions  so  that  the 

innnt  naramotorc  uiMrh  arp  cnprifir  tn  thp  twn 
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alternatives  can  be  identified,  and  their  value 
determined  for  each  case. 
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b.  To  carry  out  AMSEC  runs  for  each  alternative,-^  and 

c.  To  compare,  and  select  the  preferred  action.  Some 
specific  examples  will  illustrate  this  process. 


A. 


Use  of  Redundancy  vs.  Redesign  of  the  Unit 

1.  Identify  those  input  parameters  to  AMSEC  which  are 
sensitive  to  this  decision.  They  are: 

a.  The  material  cost  of  the  component. 

b.  The  cost  of  labor  involved  in  removal/ 
replacement  actions 

c.  The  life  characteristics  of  the  component, 
y and  P(y/2) 

d.  The  number  of  units  employed,  and  number  re- 
quired for  success. 

Other  parameters  nay  be  effected  (e.g.,  the  probability 
of  induced  failure)  but  those  shown  are  sufficient  to 
illustrate  the  analysis  procedure. 

2.  Determine  the  input  parameter  values  for  each 
alternative  under  consideration.  In  this  case 

a table  of  parameter  values  might  have  the  appear- 


a nee  shown: 

Input  Parameter 

New  Desiqn  Concept 

Original  Design  Concept 
(redundant) 

No.  of  components 

1 

4 

No.  required  for  operation 

1 

2 

Material  cost/unit 

$1  OK 

$2K 

Repair  time/unit 

2.0  hrs 

1.5  hrs 

Labor  cost/action 

$50 

$40 

Mean  life  hours 

1500 

500 

Half  life,  P(w/2) 

.8 

.7 

All  other  parameters 

same 

same 

- Several  iterations  of  AMSEC  sensitivity  may  be  required  in  each  case  to  obtain 
the  most  cost-effective  combination  of  the  other  (non-specific)  parameters 
which  are  under  management  control  (e.g.,  the  TBO  for  preventive  maintenance.) 


3.  Enter  all  parameters  into  AMSEC  to  obtain 
system  outputs. 

4.  Tabulate  and  compare  AMSEC  outputs.  For 
example,  a table  of  outputs  may  have  the 
appearance  shown: 


Output  Measure 

System  with 

New  Design  Concept 

System  with 

Original  Design  Concept 

Reliability 

.95 

.98 

Availability 

.99 

.99 

Life  cycle  support  cost 

$20/hr 

$25/hr 

Spares  required 

1 

1 

5.  Select  preferred  alternative.  In  this  case,  if 
the  gain  in  going  from  .95  to  .98  reliability  is 
judged  to  be  worth  more  than  $5/hr,  the  use  of 
redundancy  would  be  selected. 

B.  Selection  of  Packaging  Configuration 

The  decisions  of  how  to  subdivide  and  package  within  a system  have  important 
RMACS  consequences. 

Two  or  more  components  may  be  put  together  in  such  a way  that  they  are  main- 
tained/removed/replaced together.  When  one  fails,  all  are  replaced;  when  one  is 
preventively  removed,  all  are  preventively  removed.  This  grouping,  or  "packaging" 
of  components  may  involve  a physical  encapsulating  into  a single  unit;  or  it  may 
involve  merely  a procedural  edict.  In  either  case,  the  effect  on  scheduling  of  actions 
is  the  same. 


1.  Identify  the  alternative  packaging  configuration 
alternatives.  For  simplicity,  assume  they  are  as 
shown  below: 


Configuration  1 


Comp  A ' Comp  B = [ Comp  AB 


Configuration  2 
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The  new  conponent  AB,  may  be  viewed  as  a single  component  having  two 
Independent  modes  of  failure,  l.e.,  A falls  and/or  B falls. 

2.  Identify  the  AMSEC  Input  parameters  which  are 
sensitive  to  this  decision.  They  include,  for 
example: 

a.  The  material  cost  of  A,  B,  and  AB 

b.  The  cost  of  labor  Involved  in  remove/ replace 
actions 

c.  The  life  characteristics  y and  P (y/2)  for 
A and  B 

d.  Repair  time  for  A,  B,  and  AB 

3.  Determine  Input  parameter  values  for  each  alter- 
native: A,  B,  and  AB 

4.  Conduct  point-value  analysis  of  "system"  A + B 
and  "system"  AB  (the  two  configurations  shown) 

5.  Conduct  sensitivity  analysis  for  both  systems 
with  respect  to  preventive  removal  period,  r, 
and  obtain  least  cost  operating  point  for  assumed 
cost  of  mission  failure. 

6.  Tabulate  AMSEC  outputs  for  the  alternative  configur- 
ations and  compare. 

7.  Select  preferred  alternative. 

Figure  III. 8 shows  the  result  of  an  analysis  carried  out  on  the  Army's  Gama 
Goat  to  assess  the  desirability  of  considering  each  set  of  multiple  components  (i.e., 
"u"  joints,  ball  joints,  yokes,  brake  assemblies, and  tie  rods)  as  a single  "package" 
for  purposes  of  maintenance. 

C.  Selection  Between  Competing  Vendors 

This  amounts  to  an  assessment  of  the  relative  life  support  cost  and  effec- 
tiveness consequences  which  result  from  buying  a component  from  either  of  two 
competing  vendors.  Several  factors  need  to  be  distinguished  for  each  version; 
these  include: 

a.  Life  characteristics  y and  P (y/2). 

K rnmnrtnonf 
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c.  Estimated  labor  cost  to  remove/ replace. 

d.  Estimated  distribution  of  time  to  remove/replace. 
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FIGURE  II I. 8.  COMPARATIVE  EVALUATION  OF  RELIABILITY 
AND  COST  UNDER  ALTERNATIVE  PACKAGING  CONCEPTS 
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The  following  procedures  are  followed  in  assessing  the  relative 
units  which  accrue  to  each  option: 

1.  Collect  estimates  of  values  of  pertinent  para- 
meters from  competing  contractors. 

2.  Review  contractor  documentation  or  conduct  in- 
house  tests  to  confirm  parameter  values. 

3.  Enter  into  AMSEC  and  obtain  point  estimates  for 
each. 

4.  Conduct  sensitivity  analysis  to  determine  mini- 
mum cost  TBO  in  each  case. 

5.  Prepare  matrix  of  estimates  of  R,  M,  A,  C and 
S for  each  option  as  determined  in  Step  4. 

6.  Select  preferred  vendor. 


USE  OF  MONITORING  AND  ON-CONDITION  MAINTENANCE  TECHNIQUES 
Problem  Description 

With  equipment  which  tends  to  fail  exponentially,  there  is  no  wearout 
exhibited  and  failure  is  essentially  random.  Under  these  conditions,  monitor- 
ing is  of  no  value.  Where  wearout  is_ involved,  either  as  a continuing  factor 
or  as  a factor  whose  onset  may  be  triggered  by  a random  event,  a monitoring  pro- 
cedure can  often  estimate  the  extent  of  the  underlying  degradation  by  measuring 
some  observable  performance  parameter  or  physical  feature.  The  removal  time  can 
then  be  selected  so  as  to  minimize  total  support  cost.  This  is  often  a more  pre- 
cise, and  consequently  more  cost-effective  procedure,  than  so-called  hard-time 
removal.  Whether  it  should  be  used  in  preference  to  the  hard-time-removal,  or 
the  repair-upon-failure  options,  depends  on  the  characteristics  of  the  specific 
component,  and  the  monitoring  techniques  under  consideration.  Several  factors 
are  involved: 

a.  Life  characteristics  of  component. 

b.  Accuracy  of  monitoring  measure  (error  distribution) 
selected  for  component  feature. 

c.  Measurement  threshold  assigned  for  removal. 

d.  Distribution  of  selected-feature  measurement  at  time  of 
component  failure  (or  distribution  of  estimated 
remaining  life  when  selected  feature  is  at  pre- 
scribed threshold). 

e.  Material  cost  of  component. 

f.  Labor  cost  of  remove/replace  actions. 

g.  Capital  cost  of  monitoring  equipment. 

h.  Operating  cost  of  monitoring  equipment. 

Of  these  characteristics,  all  but  (c)  are  predetermined  for  purposes  of  this 
illustration.  Item  (c)  can  be  varied  to  obtain  a minimum  cost  monitoring  pro- 
cedure. Item  (d)  can  be  estimated  from  an  engineering  assessment  of  data  on 
components  returned  for  overhaul,  such  as  the  currently  documented  disassembly, 
inspection,  and  repair  (DIR)  reports. 
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Analysis  Procedure 

1.  Calculate  effective  life  characteristics  of 
component.  The  actual  life  characteristics  of 
the  component,  in  terms  of  time  to  failure,  will 
be  modified  by  the  existence  of  the  monitoring 
procedure.  What  we  wish  to  calculate  is  the 
distribution  of  times  to  removal,  broken  down 

by  "mode,"  or  reason  for,  such  removal,  where  the 
modes  are  defined  as: 

a.  Failure  of  component,  and 

b.  Removal  through  monitoring  policy. 

The  effective  life  characteristics  can  be  determined  analytically  from  the 
above  factors  (a),  (b),  (c),  and  (d).  This  analysis  subroutine,  and  the  necessary 
AMSEC  programming,  represents  a fairly  straightforward  extension  to  existing 
AMSEC  capability. 

2.  Enter  all  parameters  into  AMSEC  and  obtain  point- 
estimates. 

3.  Conduct  sensitivity  analysis  to  optimize  monitor- 
ing threshold  for  removal  actions. 

4.  Enter  original  component  failure  distribution  (with- 
out monitoring)  into  AMSEC  and  obtain  point  estimates. 

5.  Conduct  sensitivity  analysis  to  optimize  TBO  for 
hard-time  removal  actions. 

6.  Enter  TBO  = oo  to  evaluate  the  repair-upon-failure 
options. 

7.  Compare  and  select  preferred  option. 
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CHAPTER  3 
TEST  STAGE 


INTRODUCTION 

As  the  field  test  stage  of  the  development  program  gets  under  way,  most  of 
the  design  decisions  have  been  made.  The  system  is  being  tried  out  in  an  actual 
use  environment,  although  that  may  not  be  the  same  as  the  final  environment  in 
which  the  system  will  be  used  operationally.  The  major  thrust  of  the  test  program 
is  to  see  how  the  system  responds  in  the  real  world,  to  translate  that  response 
into  an  updated  appraisal  of  how  it  can  be  expected  to  behave  in  operational  use,  and 
to  "fine-tune"  any  system  design,  support  or  use  parameters  which  can  still  be 
adjusted.  j 

The  following  pages  describe  AMSEC  application  to  some  of  the  planning 
problems  that  are  typical  of  the  test  stage. 


UPDATED  ASSESSMENT/PROJECTION  OF  RMACS 


Problem  Description 

Estimates  of  the  RMACS  characteristics  of  the  system  as  displayed  during 
the  test  stage  are  usually  required  contractually.  Quite  often  acceptance  of 
the  system  depends  upon  the  field  demonstration  that  adequate  levels  of  reli- 
ability and  availability  have  been  reached  through  the  development  process,  and 
that  support  cost  has  been  held  within  specified  limits. 

The  problem  has  two  aspects: 

a.  The  assessment  under  test  conditions,  and 

b.  The  projection  to  specified  operational  use 
conditions. 

The  differences  between  the  two  operational  environments  lie  in  several 
factors : 

a.  The  mission  duration 

b.  Component  utilization  and  stress 

c.  Operational  failure  criteria  for  components/ systems 

d.  The  maintenance  plan 

e.  Skill  levels,  equipment,  etc.,  available  for 
maintenance,  with  consequential  impact  on  repair 
times,  diagnostic  accuracy,  etc. 

f.  Procedural  rigor  in  following  operational /mainte- 
nance schedules. 

The  test  observations,  coupled  with  D/D  data  from  engineering,  will  provide 
best  estimates  of  the  equipment  related  inputs.  By  combining  this  information 
with  the  operational  and  support  data,  first  for  the  test  environment  and  then  for 
the  use  environment,  AMSEC  can  provide  the  corresponding  assessments  for  the 
system  and  for  its  comoonents. 

Analysis  Procedure 

1.  Collect  parameter  values  applicable  during  test 

2.  Conduct  AMSEC  analysis  to  obtain  point  values  of 
RMACS  for  test  conditions 
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Modify  use  and  support  parameter  values  to 
describe  anticipated  operational  use. 

Conduct  AMSEC  analysis  to  obtain  point  values 
of  RMACS  for  operational  conditions. 

Conduct  sensitivity  analyses  with  respect  to 
e.g.,  component  TBO  interval  to  optimize 
operational  projections. 

Prepare  formal  reports  as  required. 


% 
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SELECTION  OF  M STRATEGY 
Problem  Description 

For  a system  whose  design  and  operational  use  patterns  are  established,  the 
cost  effectiveness  of  the  system  can  be  improved  by  proper  selection  of  preventive 
maintenance  removal  intervals  for  the  components.  For  the  moment  we  shall  focus 
on  hard-time  renewal  as  the  basic  approach;  the  extension  to  condition-monitoring 
and  on-condition  maintenance  is  obvious  in  the  context  of  the  discussion  in 
Chapter  2 preceeding. 

From  the  overall  system  viewpoint  the  approach  to  determining  optimal  main- 
tenance strategy  involves  three  steps: 

1.  Determine  the  optimal  renewal  interval  for  each 
major/critical  component. 

2.  Integration  of  analysis  (1)  to  consider  single  vs. 
multiple  renewal  actions  during  a given  mainten- 
ance repair  downtime. 

3.  Determination  of  the  optimal  allocation  of  a 
limited  maintenance  budget  between  renewal  sche- 
dules for  different  components. 

AMSEC  in  its  present  form  can  provide  solutions  to  (1)  and  (2).  The  alloca- 
tion problem.  Item  (3)  has  been  successfully  solved  by  COBRO  in  a related  area, 
and  could  be  readily  merged  with  AMSEC  to  further  extend  its  capability. 

Analysis  Procedure 

A.  Optimal  component  renewal  interval: 

1.  Specify  number  of  missions  (v)  or  time  over  which  the  M plan 
is  to  be  evaluated  for  system  use. 

2.  Enter  all  design  and  operational  use  data  for  ith  component 
into  AMSEC;  enter  nominal  value  of  TBO  interval,  and  enter 
estimate  of  mission  failure  cost  ascribable  to  failure  of  the  it*1 
component  (in  the  mth  mode;  if  desired). 

3.  Conduct  sensitivity  run  with  respect  to  TBO  interval,  x,  to  obtain 
optimal  value  over  the  v-mission  period  of  use. 

4.  Tabulate  results  by  component,  in  order  of  increasing  values  of  x. 
Printout  renewal  labor  man  hours  and  calendar  hours  for  each. 
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B.  Single  renewal  vs.  merged  renewal: 

The  advantage  in  merging  two  (or  more)  preventive  maintenance  actions  lies 
in  two  factors.  First,  if  the  components  are  located  close  together  physically, 
the  maintainer  may  be  able  to  take  advantage  of  a single  equipment  disassembly 
action  to  conduct  both  actions,  and  thus  save. time  and  labor.  Second,  if  the 
two  distinct  TBO  optima  are  located  close  together  in  time,  the  maintainer  may 
accomplish  both  during  a single  system  down-time,  and  thus  save  system  availability. 
Candidate  groupings  of  components  should  be  tested  from  both  viewpoints. 

1.  Enter  tabulation  of  Step  A. 3 above  to  identify 
and  code  those  groupings  of  n components  where  a 
single  teardown  would  provide  maintenance  acess 
to  all. 

2.  Select  a subset  X.  of  these  n components  for  eval- 
uation, where  merged  renewal  actions  are  deemed 
feasible  from  an  engineering  viewpoint. 

3.  Determine  labor  man-hours  and  calendar-hours  for 
teardown  and  close-up  actions,  which  are  common 
to  all  Xi  components. 

4.  Calculate  labor  man-hours  and  calendar-hours  for 
multiple  renewal  of  all  X^ . 

5.  Conduct  a sequence  of  AMSEC  system  evaluations 
using  each  subset  combination  X^  as  a single 
merged  unit. 

6.  Compare  results  of  B.5  with  those  of  A. 2 and 
select  preferred  strategy. 

7.  Enter  tabulation  of  Step  A. 3 above  to  identify  and 
code  those  components  which  were  not  considered  for 
single  teardown  but  whose  individual  TBO  optima 
occur  within  a short  enough  time  interval  t.  so 
that  the  desirability  of  combined  actions  should  be 
tested. 

8.  Conduct  an  AMSEC  system  evaluation  using  those 
components  whose  individual  optima  lie  within  +t. 
as  a single  merged  unit. 
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9.  Conduct  sensitivity  analysis  with  respect  to  t, 
and  select  minimum  cost.  Note  that  for  t=0,  the 
results  will  coincide  with  A.  2 above. 

10.  Aggregate  the  results  of  A. 2,  B.6,  and  B.9  to 
specify  the  minimum  cost  maintenance  strategy 
(corresponding  to  assumed  mission  failure  cost 
penalties) . 

C.  Allocation  of  Maintenance  Budget 

For  a given  (ith)  component,  the  assignment  of  a hard-time  renewal  interval 
has  an  impact  on  both  its  reliability/availability  and  on  its  support  cost.  In 
particular  if  the  interval  is  reduced,  the  average  age  of  components  in  field 
use  is  reduced.  For  equipment  with  wearout  characteristics,  this  means  mission 
reliability  will  increase.  The  reduced  TBO,  however,  will  cause  an  increase  in 
replacements  and  hence  in  support  cost,  assuming  that  the  cost  of  replacement  upon 
failure  is  no  greater  than  the  cost  of  replacement  prior  to  failure.  If  more 
money  is  invested  in  terms  of  additional  support  cost  (decreased  TBO),  reliability 
can  be  improved.  AMSEC  can  be  used  to  develop  a "reliability  return  curve"  of 
the  form  shown  in  Figure  III. 11a  for  each  component.  This  curve  displays  graphi- 
cally the  improvement  in  reliability  brought  about  by  a specified  increase  in 
support  cost. 

Now  if  a limited  support  budget  is  available,  that  budget  must  be  allocated 
between  contending  candidate  components.  The  situation  is  illustrated  for  two 
components  in  Figure  II I. lib.  Each  curve  shows  the  gain  which  would  be  realized 
for  the  corresponding  component,  if  the  specified  budget  were  spent  on  that 
component  exclusively. 

Since  the  reliability  of  the  AB  system  is  given  by 

RAB  = RA  x rb 

it  is  obvious  that  the  planning  problem  is  to  so  allocate  the  total  available 
resources  between  component  A and  component  B that  the  product  x Rg  is  maxi- 
mized. A body  of  mathematics  has  been  developed  and  applied  to  this  specific 
allocation  problem,  so  that  the  most  efficient  expenditure  of  resources  is 
accomplished.  Procedures  for  budget  allocation  are: 
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1.  Enter  all  data  for  the  i^  component  into  AMSEC. 

2.  Conduct  sensitivity  analysis  of  R and  C to 
changes  in  t. 

3.  Develop  return  curve  by  plotting  correspond- 
ing pairs  of  values  of  R and  C for  each  iteration. 

4.  Repeat  for  each  of  the  n components  making  up  the 
"system". 

5.  Specify  a nominal  budget  Qq. 

6.  Obtain  optimal  allocation  of  Qq,  using  COBRO's 
Resource  Allocation  for  System  Planning  (RASP) 
model  as  extension  to  AMSEC. 

As  a further  step  in  the  analysis  it  may  be  useful  to  repeat  these  steps 
for  different  values  of  Q,  and  thus  investigate  the  RMAC  consequences  of  having 
different  limits  set  on  support  cost. 

Illustrative  Example 

The  AMSEC  illustration  in  Appendix  D provides  an  analysis  of  a problem  of 
the  general  nature  described  in  (A)  above.  The  results  obtained  in  Appendix  D 
relevant  to  this  problem  are  shown  in  Figure  III. 12. 
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CHAPTER  4 

OPER/TIONAL  USE  STAGE 


INTRODUCTION 

The  Introduction  of  the  system  into  operational  use  provides  management 
with  the  opportunity  to  calibrate  the  system  in  its  actual  end  environment  under 
specific  mission  conditions,  to  assess  the  accuracy  of  earlier  RMACS  and  perfor- 
mance predictions,  and  to  respond  to  any  deviation  from  anticipated  behavior  with 
appropriate  fixes. 

The  assessment  of  RMACS  can  now  be  based  on  the  most  realistic  data  yet 
available.  In  addition  it  is  useful  at  this  stage  to  broaden  the  assessment  to 
incorporate  total  fleet  capability,  in  terms  of  e.g.,  aggregate  fire  power  avail- 
able on  a target,  or  number  of  mobile  systems  surviving  a march  time  and  distance. 

Although  many  of  the  system  parameters  are  frozen  at  the  time  when  the  sys- 
tem becomes  operational,  several  important  options  are  still  open,  and  it  is  upon 
these  that  management  attention  will  focus.  These  include: 

• Tactical  uses  of  system,  e.g.,  mission  duration, 
mission  frequency,  allowable  downtime. 

• Maintenance  strategy  details,  e.g.,  component 
TBO  refinement,  level  of  repair  designation. 

• Engineering  change  proposals. 

The  following  pages  describe  AMSEC  application  to  several  of  these  planning 
problems. 
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ASSESSMENT/PREDICTION  OF  IN-USE  R,  M,  A,  C,  S 
Problem  Description 

The  added  precision  In  input  parameter  estimates  which  can  be  achieved  dur- 
ing operational  use  provides  an  opportunity  for  a periodically  updated  review  of 
predicted  RMACS,  and  a comparison  against  actual  observed  behavior.  In  addition, 
it  permits  an  improved  projection  of  the  RMACS  attributes  in  other  environments 
than  the  current  one,  and  for  other  combinations  of  missions. 

Analysis  Procedure 

The  procedures  for  developing  a point  estimate  of  RMACS  were  set  forth  in 
Section  II  of  the  Handbook,  and  the  procedures  for  a sensitivity  analysis  were 
described  at  the  beginning  of  Section  III.  The  same  steps  are  followed  here,  but 
the  input  parameters  are  more  sharply  defined;  some  parameters  which  could  freely 
vary  during  concept  or  during  D/D  may  now  be  frozen.  As  a result  the  mix  of  para- 
meters for  which  a sensitivity  analysis  is  necessary,  will  change.  The  basic 
procedure  for  the  RMACS  evaluation  are: 

1.  Insert  input  parameters  into  AMSEC. 

2.  Develop  system  RMACS  point  estimates  and  sensitivity 
studies  as  required  by  management. 

3.  Prepare  formal  evaluation  report. 

An  example  of  AMSEC  point  estimate  of  component  and  system  RMACS  is  provided 
in  Appendix  D. 

Computer  Programming  Summary 

The  insertion  of  the  results  of  an  evaluation  into  the  textual  format  of  a 
prescribed  report  such  as  MIL  STD  702-8  is  a process  which  can  be  readily  auto- 
mated. This  capability  can  be  added  as  an  AMSEC  option  and  the  computer  will  print 
out  the  entire  MIL  STD  report,  or  such  parts  of  it  as  are  desired. 
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SELECTION  OF  OPERATIONAL  TACTICS 
Problem  Description 

Operationally  related  parameters  which  are  direct  inputs  to  AMSEC  include: 

a.  Mission  duration 

b.  Mission  frequency 

c.  Mission  type  (component  utilization) 

d.  Cost  of  mission  failure 

e.  Mission  success  criteria. 

Other  mission-related  parameters  enter  AMSEC  through  a secondary  path,  by 
their  influence  on  the  previous  AMSEC  inputs.  For  example,  a sequence  of  missions 
which  exerts  more  stress  on  the  system,  by  virtue  of  higher  operating  loads  or  a 
more  harsh  environment,  will  influence  AMSEC  through  their  effect  on  the  component 
life  characteristics,  or  through  the  need  for  longer  repair/ replace  times,  etc. 

The  ability  of  AMSEC  to  Integrate  the  impact  of  operational  parameters  with 
that  of  design  and  support  parameters  provides  an  important  means  of  dialogue 
between  diverse  disciplines  during  design  and  development  (see  Chapter  2).  After 
the  system  is  in  operational  use,  the  planning  focus  of  AMSEC  shifts  to  the  planning 
of  the  mission  load  which  is  best  suited  to  match  the  system.  The  trade-off  is 
between  RMACS  efficiency  and  tactical  requirements.  To  examine  this  trade-off 
quantitatively  it  is  useful  for  Operations  to  specify  the  value  which  an  advanced 
mission  capability  provides,  in  terms  of  items,  a,  b,  c,  d,  and  e above.  Sensi- 
tivity analyses  of  RMACS  against  these  parameters--singly  or  jointly--will  then 
be  used  to  examine  trade-offs. 

Analysis  Procedure 

1.  Obtain  measures  of  value  for  (a)  increased  mission 
duration  and  (b)  increased  mission  frequency. 

2.  Enter  parameter  values  into  AMSEC. 

3.  Carry  out  sensitivity  analysis  of  Cost  (including 
cost  of  unreliability,  i.e.,  mission  failure)  vs. 
chances  in  (a)  mission  duration  and  (b)  mission 
frequency. 

4.  If  the  value  expression  in  Step  (1)  has  been 
obtained,  obtain  optimum  values  of  (a)  and  (b). 
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Figure  III. 12  illustrates  the  kind  of  quanti- 
tative trade-off  which  might  be  expected. 

5.  If  the  value  expression  in  Step  (1)  has  not  been 
obtained,  draw  up  tables  of  mission  duration 
vs.  total  cost,  for  specified  values  of  mission 
frequency.  Table  I I 1.1  shows  the  format  of 
such  Tables.  These  will  be  provided  for  qualita- 
tive review  and  judgment  by  management. 
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Total  Cost 
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and  support 
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Cost  of  tactical  capability 
^frequency  f] 

^-frequency  fp 


Opt.  D,f  Mission  duration 

FIGURE  III.  12.  EFFECT  OF  MISSION  VARIABLES  ON  TOTAL  COST 


Frequency  f-| 


Duration  of  0/S  Cost 
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TABLE  III.l.  RELATIONS  BETWEEN  MISSION  VARIABLES  AND  SUPPORT  COST 
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EVALUATION  OF  ENGINEERING  CHANGE  PROPOSALS 
Problem  Description 

After  a system  has  been  released  into  operational  use,  experience  may 
disclose  weaknesses  in  individual  components  or  subsystems  which  should  be 
corrected.  Engineering  changes  may  be  proposed  to  remedy  the  problem;  to  the 
extent  that  these  changes  may  impact  on  R/M/A/C/S,  AMSEC  can  be  used  to  evaluate 
the  alternatives. 

The  basic  problem  to  be  resolved  is  (e.g.,)  whether  the  improvement  in 
component  MTBF  or  MTTR  is  worth  the  cost  in  additional  development.  New  esti- 
mated values  of  y and  P(y/2)  will  be  entered  into  AMSEC  (bv  failure  mode  if  desired), 
and  their  imoact  on  R/M/A  and  support  cost  (or  on  total  cost,  if  the  cost  of  mission 
failure  is  known)  will  be  calculated.  These  estimates  will  be  comoared  aqalnst  the 
estimated  costs  of  additional  development. 

Analysis  Procedure 

1.  Characterize  each  alternative  proposal  as  to 
development  cost  (CR)  and  the  expected  values 
of  y and  P(y/2)  which  can  be  provided  by  Cp. 

2.  Discuss  with  cognizant  engineers  the  development 
risk  and  quantitatively  specify  risk  (e.g.,  in 
functional  form  as  shown  in  Figure  III. 13). 

3.  Enter  expected  values  of  y and  P(y/2),  along 
with  other  input  data,  into  AMSEC  and  calculate 
expected  support  cost/total  cost. 

4.  Add  expected  total  0/S  cost  and  expected  develop- 
ment cost  Cq. 

5.  Enter  current  values  of  y and  P (y/2 ) and  calculate 
support /total  cost. 

6.  Compare  results  of  (4)  against  (5).  If  Step  (2) 
is  a no-risk  venture  (e.g.,  a fixed  price  contract 
with  warranty  covering  failure  to  meet  specs)  then 
the  minimum  cost  alternative  is  preferred. 
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1.13.  ILLUSTRATIVE  PROBABILITY  DISTRIBUTION  OF  COST 
TO  ACHIEVE  ECP  OBJECTIVES 
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7.  Recalculate  (6)  using  cost  corresponding  to  90 
percentile  confidence  (Figure  III. 13).  Iterate 
for  other  percentiles. 

8.  Estimate  percent  confidence  at  break-even  point 
for  trade-off  between  Step  (4)  and  Step  (5). 

9.  Identify  decision  and  related  risk  from  Step  (8) 
for  management  choice. 
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LEVEL-OF-REPAIR-SELECTION 
Problem  Description  ' 

A major  area  for  maintenance  planning  lies  in  the  specification  of  the 
echelon  level  at  which  repair  actions  on  a component  will  take  place.  For  a 
given  component,  the  decision  may  be  different  for  different  modes  of  failure. 

The  RMAC  related  parameters  which  are  sensitive  to  this  decision  include: 

1.  Cost  of  labor  in  making  repair. 

2.  Cost  of  material,  special  tools  and  equipment 
to  provide  repair  capability. 

3.  Logistic  delay  time  in  transferring  between 
maintenance  levels. 

4.  Delay  time  awaiting  service,  parts,  etc. 

5.  Probability  of  successful  repair. 

6.  Calendar  time  to  carry  out  repair. 

7.  Logistic  shipping  and  storage  costs. 

8.  Maintenance  skill  level  required  for  repair. 

9.  Disposition  cost  of  material. 

The  calculation  of  these  values  and  the  mapping  of  the  results  into  the 
AMSEC  input  parameters  which  they  implicitly  define,  involves  consideration  of 
(a)  the  distances  to  field  operations  theater,  (b)  assignment  of  MOS  skill  levels 
to  maintenance  levels,  and  equipment  allocation,  (c)  locations  of  shipping  and 
supply  points,  etc.  Once  the  alternative  geometries  and  allocations  are  established, 
the  corresponding  AMSEC  inputs  can  be  calculated,  and  the  cost-effectiveness  of  the 
alternative  LOR  distributions  can  be  evaluated. 

Analysis  Procedure 

1.  Lay  out  current  configuration  of  maintenance 
activities,  skill  levels,  equipments,  distances. 

2.  Identify  repair  times,  MOS  and  equipment  require- 
ments for  the  i^  component  in  the  j^  mode  of 
failure. 

3.  Identify  current  feasible  alternatives  where 
the  work  can  be  done. 

4.  For  each  alternative  location,  calculate  set  of 
AMSEC  input  values  for  those  parameters  effected 
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by  the  change  (e.g.,  repair  time  distribution, 
labor  cost  for  repair,  etc.).  At  the  moment 
this  mapping  of  LOR  configuration  to  AMSEC  input 
parameter  value  is  manual.  An  extension  to 
AMSEC  could  provide  a direct  translation  so  that 
the  field  configuration  ard  logistic  parameters 
could  be  direct  inputs. 

5.  Calculate  RMACS  consequences  for  each  alternative 
under  investigation. 

6.  Select  preferred  (e.g.,  minimum  cost)  configura- 
tion. 

7.  Examine  sensitivity  of  selection  to  changes  in 
the  way  each  facility  is  staffed/equipped. 

Determine  desirable  changes  in  existing  configuration. 


APPENDIX  A 
GLOSSARY  OF  TERMS 
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The  following  pages  define  the  principle  terms  encountered  in  the  analysis 
of  system  RMAC  and  in  the  use  of  AMSEC,  as  discussed  in  this  Handbook.  For  con- 
venience the  Glossary  is  broken  down  by  major  information  category. 


INPUT  PARAMETERS 


SYSTEM  CONFIGURATION 


Component.  . . 
Equipment.  . . 


Subsystem.  . . 
System  . . . . 
N 


Lowest  indenture  level  at  which  maintenance/renewal  actions 
take  place. 

A grouping  of  one  or  more  redundant  components,  to  carry  out 
a specific  function. 

A grouping  of  equipments. 

The  entire  configuration,  comprising  all  equipments. 

Number  of  equipments  in  system. 

Number  of  components  in  equipment. 

Number  of  operable  components  required  for  kth  equipment  mission 
readiness. 

Number  of  operable  components  required  for  k^  equipment  mission 
compl etion . 


LIFE  CHARACTERISTICS 
For  k^  component: 


Number  of  mission  failure  modes. 

Number  of  mission  stages  leading  to  mission  failure  for  each 
of  j modes.  Each  "stage"  represents  the  life  distribution 
corresponding  to  a different  hazard  or  combination  of  hazards. 

Sk,j=1,2- 

Type  of  distribution  for  each  of  the  S^  ,•  stages. 

Two  general  distributions  are  provided  for: 

1.  Two  parameter  Weibull,  viz.,  p(t)  = exp  - AtB 
where  any  two  of  following  need  be  specified 

A (location);  B (shape);  p -Y  (1/B+l)  A-l/B,  (mean); 

Or  p(u/2)  = exp  - (r(l/B  + 1 )/2}B , probability 
anomaly  occurs  after  one-half  mean  argument. 

2.  Linear  segment  - read  in  point  coordinates  (argument, 
probability  of  survival)  as  many  points  as  desired. 

The  linear  segments,  by  accomodating  observations 

of  anomalies  can  display  any  combination  of  steps 
that  correspond  to  actual  use  conditions. 


A- 2 


Rev.  9/7/76 


COMPONENT  MAINTENANCE/SERVICE 

i.  L. 

For  kLn  comoonent: 

1-6.  (Constant)  probability  of  handling/transportation  (H/T) 

failure  between  missions. 


Ylk(t)=l-6k(t) 

Y2k(x)  . . . . 

ak(x) 


Age  distribution  for  initiation  of  preventive  maintenance  (PM) 
of  non-failed  component. 1/ 

Probability  distribution  of  completion  of  PM  in  time  x.— ^ 

Probability  distribution  of  completion  of  corrective  mainte- 
nance (CM)  failed  component  in  time  x.l/ 

Service  frequency  not  calling  for  component  renewal  (e.g. , 
lubrication) . 


h 

h 

h 

h 


kO 

kl 

!<2 

k4,m 


Man  hours  per  service 

Man  hours  per  PM. 

Man  hours  for  CM  per  handling/transportation  failure. 

Man  hours  for  CM  following  mission  failure  in  the  m n mode. 


LOGISTIC  SUPPORT 

h Number  of  systems  to  be  supported. 

r Rebuild  cycle,  the  operating  time  or  mission  number  after 

c which  system  is  to  be  rebuilt  regardless  of  condition. 


OPERATIONAL  USE 


v Number  of  system  missions. 

t Mission  time. 

x Time  between  missions. 

■f  h 

pk  Component  utilization  factor  for  kLn  component. 

K t h 

C.  f Failure  mode  criticality  factor  for  kL  component. 


COST  BASIS 


Ckg Cost  ($)  per  service  man  hour. 

C^  Cost  ($)  per  PM  man  hour. 

C.~  Cost  ($)  per  CM  man  hour  following  handling/transportation 

failure. 

i.  i_ 

Cuo  ....  Cost  ($)  per  man  hour  for  CM  following  failure  in  m mode, 

KO  9 m t r\ 

m = 1 ,2 , . . . 


C'kg Material  cost  ($)  per  service. 

C'kl Material  cost  ($)  per  PM. 

C'.p  Material  cost  ($)  per  CM  following  handling/transportation 

failure. 


- ok,  1-Pk,  Yk  Distributions  can  be  expressed  by  (1)  two  parameter  Weibull  or 
K (2)  linear  segment,  as  is  the  case  for  expressing  component 
life  characteristics. 
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C\  , m • • • • Material  cost  ($)  per  CM  following  failure  in  mth  mode, 

Ko,m  — to 

m = 1 ,2, . . . 


Cost  unavailability. 

C^ Cost  unreliability. 


OUTPUT  PARAMETERS 


"A"  EVALUATION 
For  k^  component: 


A,,(i) 


Rk(i)  • • • • 

fi?k(i)  . . . . 

Aa(i)  • . . . 

R?k(0  . . . . 

ns(i)-n  n?k(i) 

As(i)=n  A5k(i) 
Rs(i)-n  A5k(i) 


Probability  of  i*^  mission  accomplishment,  i.e.,  probability 
component  is  ready  for  and  survives  i^  mission,  (i  = l,2,...v) 

i.L 

Component  availability/readiness  for  i Ln  mission,  i.e.,  the  .. 
probability  that  component  is  operable  (ready)  at  start  of  itn 
mission. 

Component  reliability  during  ith  Mission,  i.e.,  the  probability 
that  component  will  survive  the  i*"  mission  given  it  is  ready. 

Equipment  availability/readiness,  the  probability  that  the  equip- 
ment will  accomplish  ith  mission. 

Equipment  availability/readiness,  the  probability  that  the  equip- 
ment will  be  operable  (ready)  at  start  of  ith  mission. 

Equipment  reliability,  the  probability  that  equipment  will 
complete  mission  given  it  is  operable  at  start. 

System  accomplishment,  the  probability  all  (or  specified) 
equipments  in  system  are  ready  and  survive  ith  mission. 

System  availability/readiness,  the  probability  all  (or  specified) 
equipments  in  system  will  be  operable  at  start  of  i*h  mission. 

System  reliability,  the  probability  all  (or  specified)  equip- 
ments will  complete  ith  mission  given  they  are  ready. 


Probability  that  h systems  operating  for  t time  units  will  require 
renewal  (sparing)  s for  less  components  of  kth  type  (i.e.,  pro- 
tection level  for  kth  component. 


EVENT  STATISTICS 
For  kth  component: 

Eko(v)  ....  Expected  number  of  service  actions  (SA's)  over  v missions. 

Ekl(v)  ....  Expected  number  of  preventive  maintenance  actions  (PM's) 
completed  on  time  over  v missions. 


The  terms  for  reliability  and  availability  assume  that  criteria  for  deter- 
mining component  operability  have  been  set  forth.  Criteria  may  vary  to 
reflect  various  levels  of  component  performance/safety  which  are  of  interest. 
Changing  performance  requirements  will  also  impact  on  component  life  character- 
istic parameter  inputs,  e.g.,  Wei  bull  A and  B parameters. 
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Ek2(v)  . 
Ek3(v)  ‘ 


Ek4,n/V) 

Ek5*v)  • 

Ek6(v)  ‘ 
Ek7(^)  • 


COST  OUTPUTS 


Expected  number  of  handling/transportation  (H/T)  failure 
over  v missions. 

Expected  number  of  PM;s  not  completed  on  time  (induced 
failure)  over  v missions. 

Expected  number  of  mission  failures  (all  modes)  over  v 
missions . 

Expected  number  of  mission  failures  in  m^1  mode  over  v 
missions. 

Expected  number  of  CM's  completed  on  time  over  v missions. 

Expected  number  of  CM's  not  completed  on  time  over  v missions. 

Expected  number  of  maintenance  actions  (MA's)  not  completed 
on  time  (NORS  + NORM)  over  v missions. 


Cumulative  costs  over  system  operating  time  for  equipment/system  by: 

Labor  as  re: 

• Service  actions 

• Preventive  maintenance  actions 

• Corrective  maintenance  actions 

• Corrective  maintenance  actions  by  failure  mode. 

Material  as  re: 

• Service  actions 

• Preventive  maintenance  actions 

• Corrective  maintenance  actions 

• Corrective  maintenance  actions  by  failure  mode. 

Unavailability 

Unreliability 


SPARES 

Wk(h,v) 


Number  of  spares  of  kth  equipment  which  will  support  h systems 
through  a period  of  v missions  with  probability  Qk. 
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MISCELLANEOUS  TERMS 


FMEA 

LOR 

TBO 

MEA(D) 

LRU 

SRU 

TRADOC 

LSA 

PM 

pm 

cm 

RAM/LOG 

ECP 

S 

DIR 

MOS 


Failure  mode  and  effects  analysis 
Level  of  repair 
Time-between-overhaul 

Maintenance  Engineering  Analysis  (document) 

Line  replaceable  unit 
Ship  replaceable  unit 
Training  and  doctrine 
Logistic  support  analysis 
Project  Manager  (management) 

Preventive  maintenance 
Corrective  maintenance 

Reliability,  Availability,  Maintainability,  Logisti 

Engineering  Change  Proposal 

Spares 

Disassembly , Inspection,  Report 
Military  operational  speciality  organization 


IMPACT  OF  REMOVAL  CRITERIA  ON  EQUIPMENT  SERVICE  TIME 


In  maintaining  equipment  performance  and  safety  in  aircraft  operation 
an  equipment  is  "renewed"  from  time  to  time  through  removaL  and  replacement 
with  a new  or  overhauled  equipment.  How  frequently  renewal  takes  place 
depends  on  the  various  reasons  that  exist  for  removal  and  the  distribution  of 
flight  hours  necessary  to  satisfy  such  reasons. 

For  many  aircraft  components,  the  Army  Aviation  Systems  Command  maintains 
records  through  the  RAMMIT  data  collection  program  depicting  the  distribution 
of  cqmponent  flight  hours  to  removal  (renewal)  by  cause  of  removal.  These 
records  are  known  by  the  acronym  "MIRF”  meaning  Major  Item  Removal  Frequency. 
The  MIRF  documents  in  summarizing  item  renewal  frequencies  distribute  the 
number  of  renewals  by  cause  into  100  flight  hour  time  intervals  since  last  prior 
renewal. 

To  estimate  the  impact  which  a particular  cause  for  removal  has  on  the 
operating  life  of  an  equipment,  it  is  necessary  to  determine  the  distribution  of 
flight  hours  to  removal  by  cause  conditional  on  the  non-interruption  of  the  distri- 
bution from  other  causes . Assuming  causes  for  removal  are  mutually  independent 
the  probability,  R(T),  that  an  item  will  survive  T flight  hours  without  being 
renewed  is  given  by 

•k  / 

R(T)  =11  Rj{T)  (1) 

where  Rj(T)  is  the  probability  that  the  j**1  cause  £■'?  renewal  will  not  take  place 
in  T flight  hours . It  is  the  purpose  of  this  note  to  provide  a method  for  estimat- 
ing Rj(T)  using  MIRF  data . 

Estimation  of  Rj 

In  developing  an  estimate  of  Rj  let  the  following  notation  apply.  Let 

1 = 1,  2,  ...  connote  the  time  interval  when 
removal  for  any  cause  takes  place 

t = flight  hours  covered  by  an  interval 

For  MIRF  recording  t has  been  set  equal  to  100  flight  hours. 

n-  = number  of  observed  renewals  for  j^1  cause  in  i**1 

time  interval 
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— number  of  observed  renewals  for  all  causes 


k 


ni  2 nij 

j=l 


in  i**1  time  interval  (total  number  of  possible  causes  equals  k) . 


m 

n = 2 nj  = 

i=l 


total  number  of  observed  renewals  for  all  causes 


over  all  time  intervals,  = 0) . 


In  estimating  Rj  an  assumption  is  made  regarding  the  nature  of  the  hazard 
of  removal  (removal  rate)  by  cause,  namely,  that  it  remains  constant  for  each 
cause  within  a time  interval.  Change  in  the  hazard  will  thus  be  permitted 
between  time  intervals  but  not  within  time  intervals.  Given  this  situation,  the 
probability,  Rj(it)  equates  to 

i 

Rj(it)  = e from  which  it  (2) 


follows  that 


R(it) 


= n Rj(i.) 


i 

-2  X t 

e i/=i  v 


(3) 


where  Xy 


Now  with  the  assumption  of  constant  failure  rate  within 


an  interval,  say^e  i>th  interval  for  each  cause,  it  is  well  known  that  given  a 
removal  in  the  v interval,  that  equates  to  the  probability  that  the  j**1 

cause  will  be  the  cause  for  removal.  This  probability  can  be  estimated  from  the 
statistic  nvj/nv  . From  equations  (2)  and  (3)  it  follows  that 


Rj(^t) 


r R(yt)  I 

LRL^-DtjJ 


since 


(4) 


Rj  Ut) 

Rj[(V-l)t 


e ^ y ^ t and 


R(pt) 
R [( 


Taking  the  product  of  Rj  ( yt)/Rj  [( v-  1)  t]  over  v 
V = 1 to  i yields  the  equation 
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'&a. 


V.k. 


Xyj/Xj; 


Substituting  sample  estimates  for  R (v t)  and  X^j/Xj, 


p=  1,2, ...»  i yields 

v 

. x§l  "* 

A i 

>-  „ 

■¥”>  ',5, 

v-l 

2,  nx 

X=1 

1 _ 

L n 

as  an  estimator  of  Rj  (it) . 

nv\ 

n„ 


(5) 


(6) 
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APPENDIX  C 

ANALYSIS  METHODOLOGY  AND  PROGRAMMING  OF  AMSEC 


The  original  analytic  formulation  and  the  computer  programs  covering  the 
AMSEC  methodology  were  delivered  to  the  Army  under  Subcontract  to  Parks  College 
of  St.  Louis  University  in  TR  8-R-l.-^  Since  the  initial  delivery,  AMSEC  cap- 
abilities have  been  extended;  this  handbook  addresses  the  development  and  applic- 
ation of  the  most  current  version. 

This  section  focuses  on  the  mathematical  modifications  which  have  been 
made  in  AMSEC  since  the  referenced  report.  A mathematical  formulation  has  been 
added  to  separate  out  different  causes  of  system  outage  (e.g.,  unavailability 
due  to  planned  maintenance)  as  possible  generators  of  different  man-hour  involve- 
ments and  cost  differences  reflecting  different  material/facility  requirements. 

A further  formulation  has  been  added  which  provides  for  aggregation  of  support 
cost  estimates  by  mode  of  component  failure/removal.  Appendix  C-l  sets  forth 
the  mathematical  basis  for  AMSEC,  and  Appendix  C-2  provides  computer  documentation. 
All  computer  programs  have  been  delivered  to  AVSCOM,  the  fully  updated  method- 
ology has  now  been  set  up  on  AVSCOM' s computers,  and  is  ready  to  use.  Appendix  D 
provides  an  illustration  of  the  use  of  the  current  version  of  the  methodology. 


~ COBRO  TR  8-R-l , "Analysis  of  Ah-lG  Engine  and  Drive  Train  Reliability,  Avail- 
ability, and  Support  Costs,"  31  January  1974,  prepared  under  subcontract  to 
Parks  College  of  St.  Louis  University.  See  page  C-3  for  material  drawn 
from  this  report  for  completeness  of  documentation. 
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APPENDIX  C.l 
MATHEMATICAL  BASIS 


BACKGROUND 

Mathematical  formulations  which  AMSEC  uses  to  determine  equipment  RAMC 
were  delivered  to  AVSCOM  as  part  of  COBRO  TR  8-k-l , "Analysis  of  AH-1G  Engine 
and  Drive  Train  Reliability,  Availability  and  Support  Cost,"  dated  31  January 
1974.  Two  versions  of  AMSEC  were  delivered:  the  steady-state  and  the  non-steady- 
state  with  the  latter  version  more  extensive  and  capable  of  driving  out  values 
of  equipment  RAMC  as  the  equipment  progresses  in  age.  For  convenience  and  ready 
reference  the  non-steady  state  version,  Appendix  D.2  of  TR  8-R-l , exclusive  of 
the  computer  programming  documentation  is  included  in  this  appendix. 

The  mathematics  of  AMSEC  considers  a system  made  up  of  replaceable  units 
each  capable  of  failure  independent  of  other  units  and  each  forming  a "package" 
for  which  there  are  necessary  support  requirements.  These  units  are  specifically 
described  in  mathematical  fashion  relative  to  their  behavior  under  real  or  postu- 
lated operational  environments/assignments  and  support  conditions.  It  is  these 
replaceable  units  which  AMSEC  mathematics  forms  in  "product"  fashion  to  produce 
system  RAMC  outputs. 

In  setting  forth  the  mathematics  of  AMSEC  for  use  with  the  handbook  certain 
changes  have  been  accomplished.  For  the  most  part  these  changes 
have  augmented  the  capability  of  AMSEC  to  reflect  "real  world"  conditions. 

Other  changes  were  undertaken  to  limit  the  required  number  of  input  variables 
necessary  to  drive  AMSEC.  These  changes  coupled  to  the  modified  computer  pro- 
grams permitted  the  development  of  work-oriented  input/output  data  formats. 

In  modifying  AMSEC  for  the  handbook,  the  following  input  variables  have 
been  fixed:  mission  time,  tf , for  the  i^  mission  set  equal  to  t for  all 

XL  XL 

missions;  x.,  time  between  i and  (i+l)*'n  mission  set  equal  to  x for  all  missions, 
and  pK(i),  the  useage  rate  of  the  Ktn  item/equipment  in  i mission  set  equal  to 
pk  for  all  missions. 

The  conditional  probabilities  BK(it,x)  and  y^  (it,x)  respectively  that  an 
equipment  which  has  aged  (it)  time  units  will  be  left  to  continue  aging  or  be 
removed  in  time  x or  less  have  been  modified  for  expression  as  distributions 
with  argument  (it).  At  present  AMSEC  is  programmed  for  expression  of  6 and  y as 
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Weibull  or  linear  segment.  The  probabilities  ( i t ) and  y^(x)  called  y-j  and 

Y2  in  the  program  are  factors  of  the  product  yk  (it,  t).  Thus  y ^ ( i t ) becomes 
the  probability  that  renewal  is  initiated  on  a non-failed  item  after  it  has 
aged  (it)  units  and  y^x)  is  the  probability  that  renewal,  if  initiated,  will 
be  completed  before  the  next  mission  commences. 

BASIC  AMSEC  FORMULATION 

The  following  material  presents  the  basic  non-steady  formulation  of  AMSEC 
and  is  drawn  from  Appendix  D.2  of  COBRO  TR  8-R-l , as  referenced  above. 

FORMULATION  OF  EQUIPMENT  MISSION  RELIABILITY  AND  AVAILABILITY 

Definition  of  Terms 


Let 


ti 


pk(i> 


Ti 


= number  of  missions  since  system  assembly 

v = 1,2,... 

= system  time  to  complete  ith  mission 
i = 1 ,2, . . . ,v 

= usage  rate  of  kth  renewable  system  component 
in  i th  mission 

= time  between  ith  and  (i+l)th  mission. 


Given  k 


th 


component  in  failed  condition,  let 
ak(ti) 


.th 


probability  maintenance  following  i w"  mission 
will  renew  component  in  time  x-j  or  less 

1-a,  (x^)  = probability  maintenance  following  i^h  mission 

will  not  renew  component  in  time  x-j  or  less 


.th 


Given  k component  in  non-failed  condition,  let 


ekj(Ti> 


.th 


Ykj(Ti>  ■ 


probability  that  maintenance  following  i 
mission  will  in  time  x-j  or  less  permit 
component  which  was  last  renewed  after  (i-.i) 
mission  (i.e.,  component  which  has  been  aged, 
Pk(i-j+l)  tk-j+1  + pk(i-j+2)  tj-j+2  + ... 
+pk(i)ti,  since  last  renewed)  to  remain  in 
equipment  as  is  for  subsequent  operation; 
j-1 ,2, ...  ,i 

• th 


probability  that  maintenance  following  i 
mission  will  in  time  x.j  or  less  renew  component 
which  was  last  renewed  after  (i-j)th  mission 
(i.e.,  component  which  has  aged 
Pk(l-j+l)ti-j+l  + Pk(l-j+2)ti_j+2+- . . 

+Pk(i)ti  since  last  renewed) 

l-Bkj(Tn*)-Ykj(Ti)  = probability  that  maintenance,  following  ith 

mission  will  in  time  x-j  or  less  induce  failure  - 
in  component  which  was  last  renewed  after  (i-j) 
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, 


Further  let 


mission  and  subsequently  not  renew  component  prior 
to  start  of  ( i +1 ) th  mission  (e.g.,  initiate  but  not 
complete  maintenance  action  in  time  or  less  such 
that  component  is  in  non-ready  condition  upon  mission 
arrival ) . 

6k  ( i)  = probability  that  handling/transportation  of  ^ 
component  between  maintenances  following  (i-1)  n 
and  i*h  missions  will  not  cause  failure 

C (1)T43  = probability  that  component  that  is  operable  at  start 
of  first  mission  will  survive  operating  time  Pk(l)T. 


EpfcUJjti  + 


= probability  that  item  will  survive  an 
operating  time 


£ [*•»«*  + Cpk(^  + l)lT 

i=y-j+l 


i/+l 


where 


if  not  failed  or  renewed  by  maintenance  or 
handling  between  missions 

Tx  = system  time' into  1st  mission 
Ty+j  — system  time  into  (v+1)^*1  mission. 


With  the  above  parameter  definitions , it  can  be  shown  by  induction  that  the 
probability  that  the  component  will  be  operable  at  time  Tv+-|  into  the  (v+l)th  mission  is 

nk(l)  * - «k(l)rtpk(l)T1} 


for  the  first  mission  and 
v 

2 Pka)ti  + Pk(y  + 1)T 
i=l 


ttk(y+l)= 


v+1 


salc(V6k  (l/+1) 


V 


1-£pkjM 


j=l 


rk  EEpk  O'  + 1)  3 T „+1  3 


u+i 


* Vv+  »£  W 


j=i 


+ w 


for  the  (v+1 ) mission,  v=l,2,... 


rk 

£ Cpka)]ti+  Cpk(,/+1)]Tv+l 

i=?> -i+1 

V 

rk) 

£ 

\ 

ki=y-j+l 

(1 


pkjW; 
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c 


/ 

V 


where  necessary  to  the  cormulation  are  the  recursion  equations 

Pkl0 ) = «k(1)rktLSk(l)  t,! 


Pkie>  = °k(Ti-l> 


i-1 


>-£>«*-»  rk  »k« 

j=i 


i-i 


+ £ yw  '‘kia-i,rkUpk(i)]ti1  6ka) 
£ , ^HIt* 


P (i)  = 8 It  ) — i2Lii+^ 

kju;  nc,0-D  i-r  I i-1 


rk  £ [PkM3tx 

x=i-j+l 


Pk, 


(J  = 2 , 3 , . . . , i) , (i  — 2 , . . . , i/J 


th 


Pjjj(i)  is  the  probability  that  the  klu  component  will  be  operable  at  end  of  ith  mission 
and  Will  have  been  last  renewed  by  maintenance  after  the  (i-j)tii  mission.  j 


Setting  Ty+i  = ty+i  in  ft;-  and  dividing  by  v + 1 gives  the  expected  proportion  (average) 
of  (v+1)  missions  accomplished  bv  the  kth  component,  viz., 


V 

£°k 
ts 


j+i 

£ pke,:i 

i=l 


V+1 


for  (v+ 1)  missions,  v=  0,  1,  2 


Average  Component  Mission  Availability 


Permitting  Tl/+1  to  approach  zero  from  the  right  in  and  dividing  by 


V+l  gives  the  expected  proportion  of  missions  for  which  the  kth  component  is 
available,  viz.. 


C-5 


Rev.  9/7/76 


WWi\  Aif  rtnii  i»  jU 


MICROCOPY  RESOLUTION  TEST  CHART 

NATIONAL  BURtAU  OT  STANDARDS  1963-^ 


▼ 


"'A'  • llm  n (J+l  ) 

skl,K° 

v + 1 


„,l|  II-  .M 

£ lim  n.Otl) 
1=0  K 
u+  1 


for  v+I  missions, 

-0,  1,  2 , • • • i 


(3) 


This  expresses  average  component  mission  availability  over  v+1  missions. 


Average  Component  Mission  Reliability 

Defining  mission  reliability  as  the  expected  proportion  of  missions 
accomolished  for  which  the  kt^  component  is  available  gives 


fik(j+l)/limnk(j+l) 
v + 1 


(4) 


for  { v+1 ) missions , . v = o,  l,  2,  . . . . 


System  Average  Mission  Availability 

Defining  As  (v+1)  as  average  system  mission  availability  for 
(v+})  ~icsionc,  it  ccn  be-  shewn  that 


v 

2 


N 


nk 

2 


Ik 


As  (v+1) 


J~0  x^xy 


[lim  nk(i+l)JX  [l -Jim  nkO+l)J  nk"x 


v + 1 


v - 0,  1,  z,  ... 


where  N 
nk 


number  of  mission  required  equipments  in  system  containing  one 
or  more  redundant  items  of  k*'1  type 

number  of  redundant  components  of  kth  type  in  each  required 
equipment 

least  number  of  items  of  kth  type  which  must  be  operable  at  begin- 
ning of  mission  to  satisfy  subsystem  availability  requirements. 


Average  System  Mission  Reliability 

Similarly  for  average  system  mission  reliability  for  v+1  missions, 
say  Rs  (v+1),  it  car.  be  shown  that 
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I 


~ r,  - l.TH 


Mb 


R(v+i ) 


v 

I 2 

j=0  k= 


s i!  U,  i'  y rx  !a'--u*')  \ h ) 

=1  Mxk  k<  J v4vcy  l Ji"-.nk(j+i)  ; 


x-v 


nk 


v + 1 


(6) 


where  Ak(x,j)  /-  Cx  (11m  fik(j+l)x  (1-lim  flk(j+l ))nk"X' 

i,L 

Xk^  x k “ least  number  of  components  of  kin  type  which  must  be  operable  at  con' 
elusion  of  mission  to  satisfy  subsystem  reliability 
requirements . 


NOTE:  Dropping  the  Operator  IT  in  Equations  (5)  and  (6)  provides  the  expressions 

for  equipment  average  mission  availability  and  reliability,  respectively. 


L 
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FORMULATION  FOR  DETERMINING  EQUIPMENT  SPARES  PROVISIONING  LEVELS 
Under  definition  of  parameters,  as  said  earlier,  let, 

\ = T' 

pj,  (i)  = pk,  and 


( • 


«k<Ti>  = ak 

«kw  = «k 


for  all  i,  i - 1 ,2, . . . ,v 


Further  let 


^kj  (Ti*  ^k.u 


yfc 5 <T1>  =yk,u 


U (i— j)  ~ 0/1 1 •••  tV7 
?ko 


ft-  = 3:  yko  = 0 


Under  these  conditions,  it  can  be  verified  that  the  distribution  of  mis- 
sions between  replacements  of  k**1  item  satisfies  the  conditions  for  a renewal 
process.  This  distribution  is  characterized  by  the  following  statement,  namely 
the  probability,  say,  n,  that  the  k**1  component  will  be  used  for  exactly  n missions 
before  being  replaced  is 


-n-l 


*k,»  - 6k  rtn  Ok  *»  [u00  ft<U>M  + [>  - r(Pkt)  6k]  (1  - a/'1*, 


(7) 


% [6k  (1  ' “k1™'1  “k  [%  *ki  ] (U-’W  r(u  0kt}  -^urt  <u<  3>  V1  {k}j 


n £ 2 , /?,  « 1 , y,  « 0 

' 1 ko  ' 
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ko 


% 


\,i = 6k r (v>  yki+  D ■ r v>  sk  ]“> 


Because  Aj-n  as  defined  forms  a renewal  process,  the  distribution  of 
equipment  spares  to  support  a given  number  of  missions  can  be  determined  by 
selling  up  Ihe  probability  generating  function 


Gk(*.r,S)={E  AknSn}r 
n=l 


The  coefficient,  say  Cj.  { m,v,v ) , 1 ^ r ^ m £ v of  S371  In  the  expansion  of 
is  the  probability  that  the  replacement  of  the  k^1  item  takes  place 
immediately  following  the  m**1  mission.  From  this  it  follows  that  the  proba- 
bility say  B}-  (r,  u)  that  exactly  r replacements  of  the  item  will  take  place 
in  support  of  v missions  of  a single  equipment  is 


L 

V r 

l/-m  _ 

r- 

1 

Pj.  (r >v)  - £ Ck(m,r,y)l 
m=r  1 

1 - r A.  J; 

- n=a  k'nJ 

Vo=°- 

(8) 

From  the  definition  of  Aj<  it  follows  of  course  that  the  probability  Bj,  (0,y) 
that  zero  replacements  take  place  in  supporting  v missions  is  Simply 


Bk(°,,)=[l-E  AkJ 


A,  = 0. 
ko 


Expected  Number  of  Total  k**1  Item  Replacements  to  Support  v Missions 

By  definition,  the  expected  number  of  total  kth  component  replacements,  say 
Ej,(v),  to  support  [v)  missions  is 

v 

Ek^)  = £ rBk(r,^) 

r=0 


Expected  Number  of  k*^  Item  Replacements  for  Carrying  Out  Planned  or 
Scheduled  Maintenances  to  Support  v Missions 

Following  the  sane  method  underlying  the  development  of  Equation  (8), 
it  can  be  shown  that  the  distribution  of  the  number  of  missions  (n)  between  k*h 
item  replacements  for  purposes  of  planned  or  scheduled  maintenance,  say 

A'k,n*  is 


= 6krk(t)7i  / n = 1 


A,k.n=6^<nt>["no0k„)7kn 


u=i i=l 


[rk  a-^k>M>  - PkiI  rk  (it)  \j  ak  Ak>n.un  - 2:  n*2.  P|t  =■  1 

Again  setting  up  the  generating  function 

, n=l 

it  can  be  shown  to  follow  that  the  coefficient,  say  Ck(m,r',t/),  1 s r'  ^ m s i;,  of 
Sm  in  the  expansion  of  Gj,  is  the  probability  that  the  r'th replacement  for  purposes 
of  planned  maintenance  takes  place  following  the  m**1  mission.  From  this  it  fol- 
lows that  the  probability,  say  B’.  (r’,  v),  that  exactly  r'  replacements  for  planned 
maintenance  of  the  k**1  item,  will  be  necessary  to  support  v missions  of  a single 
equipment  is 

v - v-m 

. Bj^(r',l/)  = CJ.(m,r',f)[l  - £ ^k.nj'  V = °‘ 


Again  by  definition,  the  expected  number  of  k^  item  replacements  for 


planned  maintenance  to  support  v missions,  say  *s 


A 

i 
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E'k(i/)  = 2 r'B'(r ' ,v) 

r’=0 


. 1 


r 

L 


\ 


V 

L 


- c 


For  the  expected  number  of  unplanned  replacements  of  the  item, 
say  E^'  ( u ) , it  can  be  readily  shown  that 

Ek  = Ek  M ~ EkM  * 

In  considering  equipment  spares  provisioning  requirements  for  h 
systems,  again  the  method  of  generating  functions  can  be  used  to  yield  the 
probability,  say  Dk  (w;  y, , • • - Vy)  that  exactly  w replacements  of  the 

k^1  equipment  will  be  necessary  to  support  {vy  + Po  + . . .+  p^)  total  system 
missions  where  is  the  number  of  missions  scheduled  for  the  i^  system, 
i = 1/2,. ..  ,h.  This  probability  is  computed  by  setting  up  and  expanding 
the  generating  function 

h 3 

Hk  VS)  = .?.{£  »k  <>•.*>  s } 

i 1 i-0 

and  equating  D^Cw;!/.  ,t/2*  ...  , v)  to  the  coefficient  of  Sw  in  the  expansion. 

A desired  protection  level  for  the  k**1  equipment,  say  Qk  (i.e. , desired  proba- 
bility of  having  sufficient  kt^1  equipment  spares  on  hand)  can  be  satisfied  by 
determining  an  inventory  wk  such  that 


(14)  l 


Wk-1 

£ 

w=0 


Wt 


Dk  (w;  V1'V2' 


...  I 


w=0 


D.  (w;  vy,  v~,  ...  v. ) . 

K i c ■ h 


(15) 


L.  . 


Taking  the  product  viz. , 


V/i 


n 2 Dv  (w;  vi  • vi  • • • • / v J 

k=l  w=0  * 


(10) 


yields  the  protection  level  afforded  h systems  with  equipment  inventories  wk,k  - 
1,2,  . . . , h. 

C-ll 


r" 

— a ~l  i . 'fra  fci 
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EMULATION  OF  EQUIPMENT  SUPPORT  COST 


For  kin  item,  let 


j = average  man-hours  per  check-out  and  test  per  mission 

hk<2  “ average  man-hours  per  planned  overhaul/renewal 

hjj  j = average  man-hours  per  unplanned  overhaul/renewal 

ck  i = average  cost  per  man-hour  per  check-out  and  test 

ck  2 ~ average  cost  per  man-hour  per  planned  overhaul/renewal 

ck  3 = avera9e  cost  per  man-hour  per  unplanned  overhaul/renewal 

ck  ^ «=  prorata  cost  for  check-out  and  test  equipment 

g = prorata  cost  for  handling  equipment  and  administrative  man- 
* hours  for  planned  overhaul/renewal 

ck  ^ - prorata  cost  for  handling  equipment  and  administrative  man- 
hours for  unplanned  overhaul/renewal 

ck,7  = materiai  (item)  cost  per  planned  overhaul/renewal 


°k.8 

ck,9 


material  (item)  cost  per  unplanned  overhaul/renewal 


mission  failure  cost. 


Making  the  necessar  association  of  the  above  parameter  definitions  with  the 
exacted  value  terms  develops'  fy+  determining  component  outages  by  cause,  the  expected 
total  cost  to  support  v .,io  ;s  each  of  duration  t of  a single  equipment  for  the 
kT-n  component  is: 

Ck,v  = ^hkl  * ckl  + ck4>  V + (hk2  * ck2  + ck5  + ck?)  E*k(p) 


+ (hk3  • ck,  + ck6  + ckg  + ck9)  Ek  (i/)} 


L 

S i 


|_  I 
1 


J J pq.lllip.il It  i 


The  total  expected  cost  Cu  to  support  a single  system  forv  missions 
each  of  duration  t thus  is  given  by 

N 

cv  = p.  C*'V 

k=l 

where  N = number  of  equipment/  comoonent  reauirinci  direct  maintenance  support. 
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EXTENDED  AMSEC  FORMULATIONS  FOR  MISSION  A/R  EVALUATION 

As  may  be  seen  from  review  of  basic  AMSEC  formulations,  no  demand  is  made 
by  the  mathematics  on  the  parametric  form  of  life  characteristics.  In  program- 
ming, however,  life  characteristics  have  been  constrained  to  accepting  linear 
segment  curves  or  combination  of  Weibull  curves,  each  curve  representing  a 
particular  mode  of  failure,  viz., 

r (ipt)  = exp  (-  I A.  (ipt)Bj 

j J 

Modified  formulations  for  this  extension  have  been  developed  which  now  permit 
greater  flexibility  in  the  expression  of  equipment  failure  characteristics  with 
respect  to  each  mode.  Expressing  survival  probability  for  the  jth  mode,  AMSEC 
now  has  the  expression  with  argument  y for  distance,  time,  etc. 

rj  <*>  = rlj  <*>  Vx)  r2j  <*-x)  dx 

This  expression  permits  recognition  of  the  fact  that  onset  of  a failure  mode 
condition  may  have  one  distribution  and  that  the  time  following  onset  to  actual 
failure  may  have  another.  For  programming,  AMSEC  now  accepts  Weibull  or  linear 
segment  form  for  expressing  both  failure  onset  and  residual  time  to  failure  for 
each  mode.  As  before,  the  program  equates  overall  probability  of  item  survival 
(all  modes)  to  the  product  of  r.(y)  over  j,  viz., 

J 

r(y)  = FI  r.(y) 
j J 

Furthering  AMSEC's  utility,  it  was  decided  to  add  formulations  to  AMSEC 
permitting  tabulation,  by  mission,  of  reliability  and  availability  of  an  equip- 
ment consisting  of  two  or  more  redundant  components.  Defining  n^  > 1 as  the 
number  of  items  in  an  equipment,  x^  £ 0 the  number  required  for  equipment  readi- 
ness (availability)  and  x'.  < x.  the  number  required  for  mission  accomplishment, 
it  follows  that  the  ktn  equipment  availability  and  probability  of  accomplishment 
for  the  mission,  say  A^v)  and  fi^v)  respectively  are  given  by  the 
expressions: 
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V 


r 

> S' 


k n 


A^k(v)  2 C x [ lim  (v)]  [ 1 - 1 i m n.  (v)] 

X— X ■' 


vx 

* and 


nektv)  - je  c"l'[nmak(v)r[i-llma  (v)Jnk'x  i,  c * [a'k(v)],[l-si'k(v)]x"y 


X=X 


y=x'k  y 


where  Tim  n(v)  = Tim  fi(v)  connotes  component  readiness  with  mission  time  aoproach- 
t-K)+ 

ing  zero  from  the  right  and 

fl'k(v)  = nk(v)/1im  ^k(v) 

For  equipment  mission  reliability,  say^^v),  it  follows  by  definition  that 

R^k(v)  = fl^(v)/A^(v)  * 

EXTENDED  AMSEC  FORMULATIONS  FOR  SYSTEM  SUPPORT  EVALUATION 

In  its  earlier  development,  AMSEC  formulations  permitted  calculations  of 
the  probability  of  r item  removal /replacements  for  failure  and  r'  item  removal/ 
replacements  for  other  than  failure,  e.g.,  prevention,  in  v missions.  Expected 
number  of  removal/replacements  prior  to  failure  and  because  of  failure  were  formul- 
ated and  programmed.  This  permitted  support  cost  projections  to  encompass 
differential  cost  estimates  for  men  and  material  associated  with  item  failures  and 
non-failures. 

Since  differential  costs  may  be  associated  with  component  removal /replacement 

for  failure  prevention,  for  failure  due  to  transportation  or  handling,  for  failure 

due  to  deficiency  in  maintenance  personnel  or  gear>  and  for  failure  due  to  mission 

stress,  AMSEC  was  modified  to  permit  calculation  of  costs  as  they  may  distribute 

by  component  over  the  above  causes  for  comoonent  removal /replacements. 

The  earlier  version  of  AMSEC  formulated  Akn,  the  probability  that  the  k1 

component  would  be  used  for  exactly  n missions  before  beinc^replaced/renewed  for  whatever 

cause.  It  also  formulated  the  probability  A'kn  that  the  kxn  component  would  be  renewed 

replaced  for  cause  other  than  failure  (e.g.,  scheduled  renewal)  after  completing 

exactly  n missions.  4 

By  partitioning  the  expression  A.  , say,  Au  = 2 ab  . 

K,n  K>nj  j_i  Knj 

it  can  be  shown  (dropping  for  convenience  the  subscript  k to  denote  component)  that 

* The  equations  for  availability,  A..,  and  mission  reliability,  R r ^ (v ) are  identical 
in  substance  to  the  expressions  under  the  operators  E II  of  equations  (5)  and  (6), 
p.  C-6  and  C-7.  In  TR  8^-1,  the  term  A(<(x,j)  in  equation  (b),  p.  C-7  was  omitted 


th 


in  error. 
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is  the  probability  that  first  renewal /replacement  of  component  since  last  renewal 
encompasses  exactly  n missions  and  is  caused  by  a non-failed  condition; 


an  ?=  2 61_1  (1-6)  r ( (i-l)t)  [ V 
i=l  x=0 


6 (xt)][l-«  (T))n"'i  «(r) 


is  the  probability  first  renewal /replacement  since  last  renewal  comes  after 
exactly  n missions  because  of  a transportation  or  handling  failure; 

an,3=  .22  611  t][  nQ  6 (xt)]  ^1 -6  (n-l)t  - y [ (n-1 )t,  t]j  [1-a  (t )]  a(t) 

is  the  probability  of  a maintenance  induced  failure  (e.g.,  failure  to  complete  pre- 
ventive maintenance  action  (PM)  before  next  mission),  causing  first  renewal /replace- 
ment after  exactly  n missions;  and  lastly, 

n i-1 

an,4=  .2  61  [r  [ (i-l)t]  - r(it)Jfl  B(xt)]  (l-a(x)  ] n‘f  a(x) 


is  the  probability  that  first  renewal /replacement  since  last  renewal  encompasses 
exactly  n missions  and  is  caused  by  mission  failure. 

Using  the  above  expressions,  the  probability  A . that  renewal /replacement 

4L  J 

for  j cause  will  occur  after  exactly  n missions,  can  be  shown  to  be: 


n-1 


\ .=  2 (A.  -a..)  A ..  + a . 
n,o  ri-j  v -\  i,.r  n-i  ,j  n,j 

j=  1 , 2,  3,  and  4 


A -permits  interlacing  of  reasons  for  renewal/replacement.  It  considers 
n 9 j 

only  that  there  will  be  n missions  of  the  system  between  replacements  of  an  item 
for  the  cause  only.  As  an  excercise  it  is  relatively  straightforward  to  show 


C-16 
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that  A^  in  the  "new"  expression  equates  of  A'  the  probability  of  n missions 
between  item  renewal /replacement  for  cause  other  than  failure  in  the  "old" 
expression  as  set  forth  on  page  C-10. 

i 

Paralleling  the  earlier  developments  of  the  probability  8(r,v)  of  exactly 
r replacements  (spares)  taking  place  in  v missions  for  all  causes,  the  probability 
8(rj,v)  of  exactly  r.  replacements  in  v missions  for  the  jth  cause  j = 1,2, 3, 4 
can  be  computed.  This  simply  requires  substitution  of  the  An ' s for  An  in  the 
expression  for  G,  the  generating  function,  and  B as  expressed  in  the  earlier 
version  as  presented  on  C-9.  Once  the  B(rj,u)'sare  computed  it  follows  by  definition  that 
the  expected  number  of  replacements  for  j cause  is  given  by: 

v 

E (r.,  v)  = 2 r.  B(r.,v) 

J rj=0  J J 

and  that  under  the  "old"  version  E (v),  the  expected  number  of  replacements  in 
v missions  for  all  causes,  becomes: 

4 

E(v)  = 2 E (r, , v) 
j=l  J 

As  regards  item  sparing  requirements  for  h systems  and  v missions  the  probability 
8(r,v)  of  r total  replacements  for  all  causes  is  included  in  the  generating  func- 
tion for  determining  the  probability  that  W spares  will  be  sufficient  for  mission 
support  purposes.  Again  if  distribution  of  spares  requirements  by  cause  is  of 
interest  8(rjv)  can  be  substituted  for  8(r,v)  in  the  generating  function  H of 
the  "old"  AMSEC  formulation. 

With  respect  to  support  cost  projections,  the  cost  notation  was  modified 
to  consider,  in  addition  to  man-hour  and  material  costs  associated  with  expected 
number  of  equipment  renewal /replacements  for  failure  and  non-failure  in  v missions, 
the  costs  associated  with  routine  service  requirements  (e.g.,  item  lubrication), 
item  non-availability  and  non-reliability.  The  "new"  cost  definition  can  be  found 
on  p.  A. 3 of  the  Glossary,  Appendix  A. 
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FURTHER  EXTENSION  OF  AMSEC  FOR  SYSTEM  SUPPORT  COST  EVALUATION 

In  partitioning  support  costs  and  system  unreliability  among  different 
kinds  of  component/subsystem  failure  mechanisms,  it  is  first  necessary  to  deter- 
mine the  distribution  of  mission  failures  by  mode  where  two  or  more  modes  of 
component  failure  exist.  The  basic  AMSEC  formulation  permits  the  insertion  of 
inputs  relevant  to  mode  failure  distributions  and  the  total  impact  of  the 
distributions  in  combination  with  specified  plan(s)  for  system  use  and  mainten- 
ance support  are  developed  in  terms  of  component/subsystem/system  mission 
unreliability.  Assuming  that  different  manifestations  of  component  failure 
may  have  different  cost  and  aircraft  safety  implications,  the  present  formula- 
tions do  not  permit  statistical  estimation  of  such  costs  and/or  the  degree  of 
prevalence  of  aircraft  safety  hazard. 

The  purpose  of  this  extension  is  to  permit  a more  extensive  analysis  of 
the  cost  and  safety  implications  of  different  modes  of  component  mission  failure 
and  their  aggregate  impact  on  total  system  support  costs  and  overall  safety. 

On  Page  C-16  the  expression  is  given  for  an^,  for  the  probability  that  a 
first  renewal  of  a component  since  its  last  renewal  will  be  caused  by  mission 
failure  and  cover  exactly  n missions.  This  expression  is  stated  in  mathematical 
terms,  viz., 

an,4  = .2  ^ [rK1'1)  ptl  " r(ipt)]['n  e(xpt)]  [l-a(x)]  a(x) 


in  all  equations  that  follow  where  the  parameters  6,  3,  a,  p,  and  t are  defined 
in  Appendix  A,  pages  A-2  and  A-3  and  r = nr.  component  survival  probability  over 

J 

all  modes,  as  shown  on  page  C-14. 

Expressing  an4  in  terms  of  the  failure  density  function  for  mission  failure, 
we  have 


where 


a 


n ,4 


n 

2 6 
i=l 


-it 


1 / 

(i-l)t 


f(y)  dy 


n b (xpt)] 


[l-ct(x)]  a(x) 


f(y)  - Il-r(y)] 


f (y)  dy  = 


[r(i-l)pt 
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From  this  expression,  we  proceed  to  formulate  the  probability,  say, 
an4m*  exactly  n missions  take  place  between  component  renewal /replace- 
ment and  that  the  reason  for  renewal  is  component  mission  failure  (designated 
by  the  index  "4")  in  the  mth  mode. 

Assuming  distributions  associated  with  the  different  component  failure 
modes  are  independent  one  of  the  other  the  probability  say  Pm(t)  that  failure 
in  the  mth  mode  will  take  place  (i.e.,  preempt  other  failure  modes  or  component 
survival)  in  the  interval  0,t  can  be  shown  to  equate  to: 


pm(t)  = / hm(y)  r(y)  dy 


where  r(y)  = n rjy) 


m=l 


and  hm(y)  = fm(y)/rm(y) 


3y 


rm(y) 


th 


,is  the  hazard  of  component  failure  in  the  m mode. 

To  develop  this  relation,  consider  an  equipment  that  can  fail  in  any  one  of  M 
independent  ways-,  each  way  has  a distribution  function  F-j(t)  and  continuous 
density  function  f,-(t).  Now  let  l-F-(t)  = IT  {l-Fn-(t)f  represent  the  probability 

th1'*"1 

of  not  failing  in  a mode  other  than  the  m mode  in  the  interval  (0 , t ) and 
f-(t)  represent  the  density  function  of  the  distribution  F-(t).  With  these 
definitions,  it  then  follows  that  Pm ( t ) equates  to: 


Pm<t> 


■// 


fm(y)  fS(x)  dx  dy 


0 ~y 

where  x is  the  time  (point)  of  component  failure  in  any  mode  other  than  m and  y is 
time  (point)  of  failure  in  mode  m.  Performing  the  above  integration,  we  have: 


0 i/m 

■ / fm(y>  dy 


dy 
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Defining  hm(t)  to  be  the  hazard  of  failure  with  respect  to  the  m 


th 


mode,  viz. , 


■ V1)/  ['-FmW] 

Pm(t)  assumes  the  form 
m 

prn(t>  = / hmCy)  fn  l'-Fi(y)]  <<y 

= f hm(y)  r(y)  dy 
0 

where  r(y)  = ft  [l -F^ (y ) ] is  the  probability  that  the  equipment  will  not 

i=l 

fail  (in  any  mode)  in  the  interval  (0,y). 

Substituting  hm(y)  r(y)  for  f(y)  in  an4  above  gives  the  expression  for 
an4m’  viz*’ 

n , r*  r1"1  -i  n-1 

an4m=  E 6 J hm(y)  r(y)  dy[  n e(xPt)J’  [i-a(x)J  a(x) 

’ ' i=1  (i-l)pt  x=0 

Expressing  rm(y)  in  the  mathematical  form  as  shown  on  page  C-14,  viz., 

y 

rm<*>  = + / r2m<*-x>  dx 

J0 
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It  follows  that  nm(y)  takes  the  explicit  form 


+ / r2m(J'-x>  dx 


where  onset  of  failure  conditions  is  represented  by  density  function  f^m  and 
from  onset  to  actual  failure  is  represented  by  a second  density  f^  . 

Referring  to  page  C-16,  we  note  that: 


n-1 

2 (A-j  - ai5  j)  An_-j , j + anj 


is  the  probability  that  there  will  be  exactly  n missions  between  renewals  for 
cause.  Substituting  4,m  for  j we  have  the  probability  that  there  will  be 
exactly  n missions  between  renewal  for  mission  failure  in  the  mtfl  mode,  viz., 

n-1 

An,4,m  = ^ (fti  " ai4,m^  An-i,4,m  + an,4,m 


Now  by  substitution  of  A . for  An  .in  the  generating  function  G (see  page  C-9) 
we  can  compute  B(r,4,v),  the  probability  of  exactly  r . mrenewals  in  v missions 
for  nrn  mode  mission  failures. 

Cost  Equations 


The  basic  AMSEC  formulation  partitions  component  labor  and  material  costs 
into  three  parts: 

1.  Those  associated  with  service  of  a routine  or  periodic  nature, 
e.g.,  lubrication 

2.  Those  associated  with  component  renewal  as  a failure  prevention 
measure  or  for  some  other  non- failed  condition,  and  lastly 

3.  Those  associated  with  component  renewal  because  of  a failed 
condition. 
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With  the  formulation  for  the  distribution  of  component  renewals  by  mode 
of  failure,  we  proceed  to  delineate  direct  support  costs  by  labor  and 
material  among  all  the  causes  for  component  renewal. 

For  support  of  k^  component,  let 

C^g  = Cost  ($)  per  service  man  hour 

C^i  = Cost  ($)  per  man  hour  for  preventive  maintenance 

C|(2  * Cost  ($)  per  man  hour  for  corrective  maintenance  because 

of  a transportation/handling  failure 

Ck3  = Cost  ($)  per  man  hour  for  component  renewal  following 
maintenance  induced  failure 

^k4m  = ^ost  ($)  Per  man  hour  for  component  renewal  following 
mission  failure  in  the  mth  mode. 

Likewise  let  C'^,  C'^,  C1^,  C'k3  and  C'^  represent  respectively  cost  ($) 
for  material  associated  with  component  service,  renewal  prior  to  failure, 
renewal  because  of  a transportation  or  handling  error,  renewal  because  of  a 
maintenance  induced  failure,  and  renewal  because  of  mission  failure  in  the 
mode. 

Completing  the  necessary  notation  for  purposes  of  system  support  costing 
let  ^kO’  hkl  ’ hk3’  anCl  *1k,4,nfepresent’  respectively,  the  man  hours 
associated  with  component  service,  renewal  prior  to  failure,  renewal  for  trans- 
portation or  handling  error,  maintenance  induced  failure,  and  lastly,  renewal 
due  to  mission  failure  in  the  m*’*1  mode.  As  in  the  basic  AMSEC  C^  and  C^  refer 
to  costs  of  component/system  unavailability  and  unreliability  (e.g.,  cost  of 
mission  abort)  over  and  above  man  hour  and  material  costs. 

Now  with  computation  of  the  B(r-y)'s,  j=l,2,3,  and  4m;  m = 1,2,..,  we 

J 

can  determine  the  expected  number  of  component  renewals  over  v missions  for: 

a.  Maintenance  actions  prior  to  failure  (e.g.,  failure  prevention), 

Ek(r.,,v) 

b.  Transportation  or  handling  accidents,  E^Cr^.v) 

c.  Maintenance  induced  failures  or  incompleted  PM  actions, 

Ek(r3,v)  and 

d.  Renewals  because  of  m**1  mode  mission  failures, 

Ek^r4m’  n=1>2>-*- 
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For  purposes  of  distributing  mission  failures  by  some  assigned  criticality 
factor  (e.g.,  chargeable  or  non-chargeable  for  test  assessment  purposes)  an  addi- 
tional index,  say  |=  1,2, can  be  placed  with  the  above  designator  for 

expected  mission  failures  by  mode,  i.e., 

Ek  (r4»'v)  * Ek  <r4mi»  v) 

The  criticality  factor  i , applying  to  several  modes,  permits  aggrega- 
tion and  distribution  of  failure  by  criticality  upon  summation  of  the  E^'s 
over  a common  i i ndex . 


f 
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Appendix  C.2 
Part  1 

PROGRAM  EQUIPMENT-MISSION  RELIABILITY  AND  AVAILABILITY  MODEL 

Version  3 
Fred  S.  Zusman 
June  8,  1976 


INTRODUCTION 

This  Fortran  computer  program  is  an  implementation  of  the  third  version 
of  a model  developed  by  W.  Cook  of  COBRO  to  compute  equipment-mission  relia- 
bility and  availability.  A mathematical  description  of  the  model  is  provided 
in  Appendix  C.l.  This  version  allows  for  two  step  failures. 

SUMMARY 

This  program  reads  data  describing  the  failure  rates,  repair  parameters 
and  usage  characteristics  of  the  equipments  in  a complete  system.  The  output 
of  the  program  is  a summary  for  each  component,  each  equipment  and  the  total 
system  of  the  fractions  of  the  missions  it  accomplished,  the  fractions  of 
missions  it  was  available,  and  its  mission  reliability  for  each  of  specified 
numbers  of  missions.  The  details  of  the  computation  are  given  in  the  above 
mentioned  paper.  The  program  and  its  usage  are  described  herein. 

INPUT 

After5  reading  a set  of  curve  inputs,  the  program  reads  sets  of  the  input 
cards  described  in  detail  below  and  computes  the  values  of  the  output  para- 
meters. After  printing  the  results  another  set  of  input  cards  is  read.  The 
program  stops  if  no  more  sets  of  data  are  to  be  read  or  if  there  are  any  data 
errors.  Each  set  consists  of  control  inputs  and  equipment  inputs. 


APPENDIX  C.2 


* 


•4 


DOCUMENTATION  OF  COMPUTER  PROGRAMS  FOR  APPLICATION 
OF  ANALYTIC  METHOD  FOR  SYSTEM  EVALUATION 
AND  CONTROL 


Version  3 
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CURVE 

0 

0 • 

4 

INPUT  DATA  BASE  (CARDS  OR  DISK)  (Unit  9)  (tURVIN) 

Card 

Columns 

Description* 

1-10 

NCURVE,  number  of  curves  to  be  read  from  the  curve  data 
base  (1-100) 

For  each  curve,  the  following  cards  (2-3)  are  needed: 

2 

1-10 

NSIZE,  number  of  points  in  this  linear  curve  or  number 
of  phases  in  this  Weibull  curve  (usually  1) 

11-20 

NCOPT,  this  curve  option  code: 

0 linear  segment  curve  for  which  (X,Y)  segment  end 
points  follow 

1 Weibull  curve  for  which  y's  and  P(y/2)'s  follow  for 
each  failure  phase 

It  ’ 

2 Weibull  curve  for  which  A's  and  B's  follow  for  each 
failure  stage 

r 

21-30 

NACC,  figures  of  accuracy  for  Weibull  computation  of  A 
and  B in  Weibull  (usually  4)  if  the  tfs  and  P(y/2)'s 
are  given 

j 

41-80 

CURNAM,  40  character  curve  name  for  descriptive  purposes 

° 

For  each  end  point  of  a linear  segment  curve,  the 
following  card  is  needed  (NCOPT  = 0) 

1-10 

Identification  (NOT  USED)  (for  sequencing  deck-safety 
feature) 

11-20 

CURVEX,  independent  variable  of  first  point 

21-30 

CURVEY,  dependent  variable  of  first  point 

[ 

41-80 

P0INAM,  40  character  point  I .D. --Printed  on  output 

Card  3.0  is  repeated  for  each  point  with  the  points  in 
order  by  increasing  CURVEX. 

OR  3.1 

Weibull  parameter  card  for  first  failure  phase 
(NCOPT  = 1 or  2) 

1-10 

Identification  (NOT  USED) 

11-20 

U or  A of  Weibull  distribution  for  first  failure  phase 

■ 

21-30 

P(y/2)  or  B of  Weibull  distribution  for  first  failure 
phase  (>  .15) 

E* 

1 ' 

41-80 

P0INAM,  40  character  distribution  I.D.  if  desired. 

Card  3.1  is  repeated  for  each  phase. 

1 

♦Integer  fields  are 

( 

right  justified. 

l 

V | 

r 

C-26 
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Cards  2 and  3 are  repeated  for  each  linear  segment  of  Weibull 
curve.  The  linear  curves  are  currently  looked  up  as  a linear 
interpolation  for  data  within  the  set  of  points  and  a linear 
extrapolation  for  data  outside  the  point  set.  One-point  curves 
are  considered  to  be  constants. 


CONTROL  INPUT  CAROS  (Unit  5)  (INPUT!) 


Card 

Col umn 

Description 

1 

1-76 

ITLE,  any  76  character  title  for  run 

77-80 

IPR,  debug  print  option  code 

0 $ no  debug  print 

1 give  debug  print 

2 

1-5 

NMISS,  number  of  missions  to  be  run  through 
(1-100) 

6-10 

T,  length  of  all  missions  (in  hrs) 

11-15 

Tau,  interval  between  missions  (in  hrs) 

16-25 

EPS,  accuracy  for  GAUSSIAN  QUADRATURE  routine  (usually 
.00001) 

41-80 

MISNAM,  40  character  mission  name 

3-7 

1-80 

MISDES,  5 card  mission  description;  5 cards  required, 
may  be  blank 

8 

1-5 

JDEL1 , step  for  mission  printout  up  until  mission  JMAX1 

6-10 

JMAX1 , limit  for  use  of  JDEL1 

11-15 

JDEL2,  step  for  mission  printout  after  JMAX1 

I 

\ 

i 


COMPONENT  INPUT  CARDS  (Unit  5)  (COMP,  RDCOMP) 


Card  Column 


Description 


1 


2 


3 


4 


1-10  NTYPES,  number  of  components/equipments 

For  each  component/equipment,  the  following  cards 
(2-4)  are  needed. 

1-16  IENAME,  16  character  equipment  name 

21-30  XNK,  number  of  components  in  this  equipment 

31-40  XXK,  number  of  components  required  for  readiness  of 

equipment 

41-50  XXKP,  number  of  components  required  for  reliability  of 

equipment  (mission  success) 

68-80  IFUNAM,  functional  group  and  position  of  the  component 

1- 16  ICNAME,  16  character  name  of  component 

21-25  NFAILS,  number  of  mission  failure  modes  (1-10) 

26-30  RHO,  usage  rate  of  component 

31-35  IALPHA,  curve  number  for  computation  of  a as  function 

of  interval 

36-40  IBETAC,  curve  number  for  computation  of  3 (non  renew- 

ing probability)  as  function  of  time  used 

41-45  IGAMM1 , curve  number  for  computation  of  y, , probability 

of  initiating  renewal)  as  function  of  tim4  used 

46-50  IGAMM2,  curve  number  for  computation  of  y2,  (renewal 

probability)  as  function  of  interval 

51-55  DELTA,  6 (probability  that  handling  between  missions 

will  not  cause  a failure) 

56-60  IRFRB,  rebuild  cycle  (missions) 

61-80  UNIT,  20  character  description  of  usage  variable 

(e.g. , hours) 

1 M0DTYP(1),  mode  type  for  first  failure  mode  (1=>  use 

curve  defined  by  IEVN01 , 2 ^ use  two  step  failure 
defined  by  curves  IEVN01  and  IEVN02). 

2- 3  IEVNOl(l),  curve  number  to  use  to  compute  R^  as  function 

of  time  used 

4-5  IEVN02 ( 1 ) , curve  number  to  use  to  compute  R2  as  function 

of  time  used 

If  R, , is  a linear  curve  and  M0DTYP=2,  then  the  next 
curve  list  must  be  f^ . 

7-12  Same  data  for  failure  mode  2. 

14-19  Etc.  for  up  to  10  failure  modes. 
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PROGRAM  AND  SUBPROGRAM  DESCRIPTIONS 


MAIN- -Main  Program 


This  main  program  calls  subroutines  to  (1)  read  curve  inputs, 

(2)  read  control  inputs,  (3)  initialize  totals,  (4)  compute  the  detail  results 
and  (5)  print  the  system  results.  It  processes  all  the  sets  of  inputs  on 
Unit  5 and  then  stops. 

Subroutines  called:  CURVIN,  INPUT2,  INIT,  COMP,  PRTOT 
INPUT!— Read  Control  Inputs 

This  subprogram  reads  and  checks  the  control  data  deck.  MUST  is 
adjusted  if  necessary.  XNTM1  is  computed  (NT-1). 

CURVIN— Read  Curve  Inputs 

This  subprogram  reads  and  checks  the  curve  data  deck.  The  Weibull  A' 
and  B's  or  p's  and  P(y/2)'s  are  computed  and  printed. 

Subroutines  called:  COMPAB 

INIT— Initialize  System  Results 

This  subprogram  clears  the  mission  products  (PROD)  and  set  up  units 
21  and  22  for  the  computation  of  PROG. 

COMP— Control  for  Equipment  Computations 

This  subprogram  controls  the  computation  for  each  equipment  type.  It 
reads  the  equipment  data  and  after  initializing  totals  computes  P and  ft  and  the 
summary  statistics. 

Subroutine  called:  RDCOMP,  INIT1 , C0MP2,  C0MP3 , C0MP4 
RDCOMP— Initial  i zes  Mission  Data 


This  subprogram  reads  and  checks  the  usage  and  repair  data  for  the 
current  equipment— mission  combination  and  computes  and  prints  information 
about  the  equipment. 

Subroutine  called:  COMPRK 
INIT1  — Initialize  Equipment  Totals 

This  subprogram  clears  the  mission  totals  for  the  current  equipment 
(TOT)  and  computes  basic  data  for  the  equipment  for  all  missions. 
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C0MP2 — Compute  P 


This  program  computes  P (end-operable  probability)  recursively  for 
each  mission. 

Subroutine  called:  None 
C0MP3— Compute  OMEGA 

This  subprogram  computes  the  ft's  (operable  probability)  for  the 
beginning  and  end  of  each  mission. 

Subroutine  called:  None 
C0MP4- -Compute  Equipment  Statistics 

This  subprogram  computes  the  missions  accomplished,  reliability  and 
availability  for  the  current  mission.  It  also  steps  on  disk  the  products  to 
compute  the  system  totals.  The  results  for  specified  missions  are  printed. 

Subroutine  called:  SUMBIN 
PRTQT— Print  System  Totals 

This  subprogram  reads  from  disk  and  prints  the  summary  statistics  for 
the  entire  system. 

COMPRK  (TE1 , IBFAIL,  IEFAIL) 

This  function  type  subprogram  computes  the  probability  of  survival  (Rk) 
for  one  or  more  failure  modes. 

Subroutine  called:  CURVE,  AUGAUS 
AUGAUS  (A,  B,  R,  S,  J,  F,  RP) 

This  is  a standard  Gaussian  Quadrature  routine  used  in  this  program  to 
compute  the  two  stage  integral  possibly  required  for  the  computation  of  R^. 

Subroutine  called:  None 
CURVE  (IX,  X,  IWEIBQ  ) — Curve  Look-up 

This  function  type  subprogram  computes  the  value  of  the  IX*^  curve 
using  X as  the  argument.  Only  answers  between  0 and  1 are  allowed  and  the 
answer  may  be  complemented  depending  on  IVIEIBO. 

Subroutine  called:  YLIN36 


COMPAB  (XMU,  P,A,B,  NACC)-- Weibull  Parameter  Computation 

This  subprogram  computes  the  A and  B of  the  Weibull  distribution  using 
XMU  and  P with  accuracy  NACC  (figure). 

Subroutine  called:  WEG,  GAMMA 

WEG  (I,  XNP1,  J,  N) — Solve  X = f(X) 


This  subprogram  permits  the  iterative  solution  of  an  equation  of  form 
X = f (X) . 


Usage: 

1st  Call: 


I = 1 

XNP1  = initial  value  on  input/new  value  on  output 
J = accuracy  desired  (figures) 

N = not  used. 


Successive 

Calls:  I = 2 

XNP1  = f (XNP1)  from  last  call  on  input/new  XNP1  on 
output 

J = not  used 

N = 0 solution  not  found  so  recpmpute  f (XNP1) 

N = 1 solution  is  XNP1. 

YLIN36  (N,  XL,  YL,  X)— Linear  Curve  Look-up 

This  function  type  subprogram  generates  the  value,  using  X as  the 
argument,  of  the  function  YL  = f (XL ) where  f (XL)  is  a linear  segment 
curve  specified  by  the  N points  (XL,  YL). 

SUMB1 --Compute  Equipment  Statistics  > 

This  subprogram  computes  the  equipment  statistics  using  the  sum  of 
binomial  terms. 

SUMBIN  (XM,  XL,  P SUM)--Compute  Binominal  Sums 
This  subprogram  generates  the  following  sum 


sum  = 2 C)pX  (1_P)> 


Subroutines  called:  XNORM  (if  needed), 


I 

" 


PRINT  OUTPUT 

The  program  generates  printed  outputs, of  the  inputs  as  read,  as  well  as 
optional  de-bug  information  and  summary  results.  The  following  discussion  is 
broken  down  by  output  unit.  A Job  Deck  Listing  with  test  data  can  be  found  at 
the  end  of  this  section  along  with  an  example  df  the  program  output. 

UNIT  6--Input  and  Error  Message  Print 

CURVIN--The  curve  inputs  are  printed  as  read  except  that  for  the  Weibull 
distributions. 

The  A's,  B's,  y's  and  P(y/2)'s  are  all  printed. 

INPUT1--The  title  and  mission  data  inputs  are  printed  as  read. 

COMP—  The  title  is  printed  as  well  as  the  NTYPES  input  card 

RDCOMP— The  equipment  inputs  are  printed  as  read 

All  error  messages  are  printed  as  follows  and  the  program  usually 

stops . 

CURVIN— NCURVE  TOO  BIG  (NCURVE,  LIMIT) 

NCOPT  OUT  OF  RANGE 
NO  ROOM  FOR  CURVES  (LIMIT) 

NO  CURVE  DATA 
P TOO  SMALL  (P,  LIMIT) 

INPUT1 — NMISS  TOO  BIG  (NMISS,  LIMIT) 

NLIST  TOO  BIG  (NLIST,  LIMIT) 

RDCOMP— IBETAC  OR  IGAMM1  OR  IGAMM2  OR  I ALPHA  TOO  BIG 
(IBETAC,  IGAMM1 , IGAMM2,  IALPHA,  LIMIT) 

NFAILS  TOO  BIG  OR  SMALL  (NFAILS) 

BAD  DATA  FOR  FAILS  (IFAILS) 

XNK,  XXK,  XXKP  INCONSISTENT 
DELTA  BAD 

INIT1 — GAMMA1  + BETA  GREATER  THAN  ONE  (I,  GAMMA,  BETA) 

COMPRK — COMPRK  CANNOT  EVALUATE  RK  (ARGUMENT) 

CURVE—  NCOPT  NOT  0 OR  1 IN  RK  COMP  (IX,  X,  IXC2,  NCOPT),  curve  out  of 

Range  (IX,  X,  CURVE,  L,  I) 

COMPAB-CANNOT  SOLVE  FOR  A,  B (XMU,  P,  NACC,  NTIMES) 
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UNIT  16— Debug  Print  (IPR  ^ 0) 

C0MP2--I,  0,  TE3-TE5,  P 

COMP3— IM1 , I,  IT,  J,  SUM1-SUM3,  TE1-TE9,  OMEG,  DELTA 
C0MP4--I,  AC,  AV,  RE,  XNK,  TOT,  SUMBAC,  SUMBAV,  SUMBRE,  PROD 

UNIT  18— Component  Data  and  Results  Print 

INPUT1— The  mission  data  are  printed 

ROCOMP--The  equipment  and  component  data  are  printed  broken  down  by 

life  characteristics  and  maintenance,  frequency  characteristics 
INIT1  —The  component  life  and  support  distribution  are  printed 
C0MP4  —The  component  results  are  printed 

UNIT  19— Equipment  and  System  Data  and  Results  Print 

INIT1  —Titling  information  is  printed 
C0MP4  --The  equipment  results  are  printed 
PRTDT  —System  results  are  printed 

SCRATCH  INPUT/OUTPUT— System  Results 

Units  21  and  22  are  used  alternately  to  read  and  update  the  system  results 
as  each  equipment  is  processed.  The  files  are  binary  and  each  logical  record 
contains  mission  number  and  three  system  products  (PROD).  The  files  are 
explicitly  referenced  as  follows: 

INITl  —Writes  a record  for  each  mission  or  unit  21  with  the  products 
set  to  1.  Sets  the  read  to  be  from  21  and  the  write  on  22. 

COMP  --Switches  the  read  and  write  units  after  all  missions  are  processed. 
INITl  —Both  files  are  rewound 

C0MP4  —The  record  for  the  current  mission  is  read,  updated  and  written 
out  again. 

PRTOT  —The  final  records  are  read  and  the  system  results  are  printed. 
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COMMON  REAL  VARIABLES 


Currently  the 
T 

TAU 

XMAR 

CURVEX  (400) 

CURVEY  (400) 

P0INAM(10, 400) 
CURNAM(1 0,000) 
WE I BA  (400) 
WEIBB  (400) 
PROD  (3) 


TOT  (6) 


XNK 

XXK 

XXKP 

ALPHA 
RHO 
DELTA 
UNIT  (5) 
SUMT 


Common  Real  Variables  are  defined  as  REALM. 

t,  the  length  in  hours  of  the  missions 
The  time  between  missions 
Mission  arrival  rate 

CURVEX  contains  the  abscissas  of  the  linear  curves  and 

the  A's  or  p's  for  the  Wei  bull  distributions 

CURVEY  contains  the  ordinates  of  the  linear  curves  and  the 

B's  or  P's  for  the  Wei  bull  distributions 

The  40  character  names  for  the  400  points 

The  40  character  names  for  the  100  curves 

The  A's  for  the  Wei  bull  distributions 

The  B'es  for  the  Wei  bull  distributions 

PROD  is  the  1*^  product  over  all  components  for  the  current 
mission  where  1=1,  Accomplished 
1=2,  Availability 
1=3,  Reliability 

TOT  (I)  is  the  sum  of  the  following  statistics: 

I  = 1 Equipment  accomplished 

2 Equipment  availability 

3 Equipment  reliability 

4 Component  accomplished 

5 Component  availability 

6 Component  reliability 

N^  for  the  current  equipment  (total  components  in  the  equipment) 
X^  for  the  current  equipment  (total  components  needed  for 
availability) 

X^  for  the  current  equipment  (total  components  needed  for 
success) 

The  a for  this  equipment 
Equipment  usage  rate  (p) 

6 Tor  this  mission 

20  character  description  of  units  for  mission  length 
SUMT  is  the  sum  of  the  usage  at  the  end  of  the  Ith  mission 
going  back  U missions  (counting  the  1^) 


» > 


CAPT 

Not  used 

DELTT 

Not  used 

XIT 

Not  used 

SUMBAC 

Equipment  fraction  of  missions  accomplished 

SUMBAV 

Equipment  availability 

SUMBRE 

Equipment  reliability 

0MEGA(2) 

ft  at  the  beginning  and  end  of  the  mission 

AC 

Component  accomplished 

AV 

Component  availability 

RE 

Component  reliability 

RHOT 

Operating  time  (RH0*T) 

RKL  (100) 

R|<'s  for  the  missions 

BETA  (100) 

$'s  for  the  missions 

GAMMA  (100) 

y's  for  the  missions 

P (100,  2) 

P (0,1)  is  the  probability  of  operable  at  the  end  of  the 
Ith  mission  if  not  renewed  for  J missions 
(1=1,  current,  I = 2 previous  mission) 

RKLO 

R|<  at  start  1st  mission 

SSLIFE 

System  service  life 

EPS 

Definition  of  zero  for  quadrature  routine 

GAMMA2 

y2 

COMMON  INTEGER  VARIABLES 


ITLE  (20) 
NMISS 
I0PT1 
NTYPES 
I PR 

NLIST 

MUST  (100) 
MSTART 
MISNAM  (10) 
MISDES  (20,5) 
I 

IM1 

I TYPES 
NCURVE 
NSIZE  (100) 
NCOPT  (100) 


NACC  (100) 
IBEG  (100) 

IENAME  (4) 
ICNAME  (4) 
NFAILS 
IVEN01  (10) 
IVEN02  (10) 
MODTYP  (10) 

IALPHA 

IBETAC 

IGAWI1 

IGAMM2 

IRFRB 


20  word  (80  character)  run  title 
Total  number  of  missions  (1-100) 

Not  used 

Number  of  equipments/components 
Debug  print  option  code  Oz^no 

1 3 yes 

Number  of  missions  to  print  (1-100) 

Number  of  the  missions  to  print 
Index  for  search  of  MUST 
40  character  mission  nartie 
5 card  mission  description 
Mission  number 
1-1 

Equipment  number 
Number  of  curves  (1-100) 

Size  of  each  curve  (1-10) 

Options  for  each  curve  0=>  segment 

1 ^ Weibull  with  A's  and  B's 

2 =>  Weibull  with  u’s  and  P's 
Accuracy  for  Weibull  computation  for  each  curve 
Starting  place  in  the  CURVEX,  CURVEY  lists  for  each 
curve 

Equipment  name 
Component  name 

Number  of  failure  mode  (1-10) 

Curve  numbers  for  first  phase  of  10  failure  modes 
Curve  numbers  for  second  phase  of  10  failure  modes 
Mode  for  each  failure  mode  1^  one  phase 

2 ^ two  phases 

Curve  number  for  a computation 
Curve  number  for  3 computation 
Curve  number  for  computation 
Curve  number  for  yg  computation 
Refurbish  cycle  number 


1 


Index  of  mission  number  in  cyclic  mode 
ICYC-1 

1 Step  for  mission  print  befbre  the  JMAX1  mission 

1 Limit  for  use  of  previous  print  mission  step 

2 Step  for  mission  print  after  JMAX1  mission 

D File  number  of  unit  on  which  previous  PROD  is  kept 

File  number  of  unit  on  which  current  PROD  is  written 
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READ  CURVE  INPUTS 

CURVIN 


Set  limits 


Read  NCURVE 
Stop  if  error 


1 -**n 

Set  curve  index 


Read  NSIZE,  NCOPT, 
NACC,  CURNAM  for  curve 
II;  stop  if  error 
Set  storage 


If  NCOPT  = 2 
Set  IT  = 1 


13+1  — H 3 

STEP  to  next  point 


II  ).  1.1  n. I MM.'I  1,  11  HI  | 

CONTROL  FOR  COMPUTATION 
COMP 


* 


READ  COMPONENT  DATA 
RDCOMP 


INITIALIZE  EQUIPMENT  TOTALS 
AND  PRECOMPUTE  CURVE  DATA 

INIT1 
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Return 


RKL(l) 

-*TE2 

4 

r 

IF  IPR^O  Print 
IM7,  1,11 , IT, 0 
SUM! ,$UM2,$UM3, 
TE51 ,TE1 -TE9, 
CAPT, Omega ( IT ) , 
Delta 


COMPUTE  OMEGAS  FOR  A MISSION 
COMP3 

/"start^N 


ICYC=1 


I CYC-1 

e p(  j,i  ) -»sumi 
j=i 

EP(J,1 )*GAMMAC(J)-*5UM2 


Alpha*Delta*(l-SUMl ) -»TE6 
Delta*SUM2-*-TE7  RKLO*TE2 


1 **  IT 

Set  1st  OMEGA 


TE6  * TE2  TE8 
TE7  * TE2  -»  TE9 


I CYC-1 

E BETA(J>RKL(J  +IT-1) 
J=1 

*P(J,1)  *+  SUM3 


T E8+T  E9+  D E LT  A*  SUM  3 
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Appendix  C.2 
Part  2 

EQUIPMENT-MISSION  COST-SPARES  MODEL 

Version  4 

Fred  S.  Zusman 

Original  Date 
June  8,  1976 


INTRODUCTION 

This  Fortran  computer  program  is  an  implementation  of  the  fourth  version 
of  a model  developed  by  W.H.  Cook  of  COBRO  to  compute  equipment-mission  reli- 
ability and  availability.  A mathematical  description  of  the  model  is  provided 
in  Appendix  C.l.  This  version  allows  for  two-step  failures  and  a breakout  of 
mission  failure  results  by  cause. 

SUMMARY 

This  program  reads  data  describing  the  failure  rates,  repair  parameters, 
and  usage  characteristics  of  the  components  in  a complete  system.  The  output 
of  the  program  is  (1)  a summary  for  each  equipment  of  its  expected  maintenance 
actions  and  their  cost  by  type  (and  for  mission  failures,  by  mode);  (2)  a table 
of  component  spares  usage  Drobabilities  for  the  system-equipment  configuration; 
(3)  a summary  for  the  total  system  of  support  costs  by  type;  and  (4)  a summary 
of  system  costs  by  criticality  of  failure  mode.  The  prints  are  given  for 
specified  numbers  of  missions.  The  details  of  the  computation  are  given  in  the 
above  mentioned  paper.  The  program  and  its  usage  are  described  herein. 

INPUT 


After  reading  a set  of  curve  inputs,  the  program  reads  groups  of  the  input 
cards  described  in  detail  below  and  computes  the  values  of  the  output  parameters. 
After  printing  the  results  for  each  component  and  a system  of  component,  another 
group  of  input  cards  is  read.  The  program  stops  if  no  more  sets  of  data  are  to 
be  read  or  if  there  are  any  data  errors.  Each  set  consists  of  control  inputs  and 
component-equioment  irputs. 
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CURVE  INPUT  DATA  BASE  (CARDS  OR  DISK)  (Unit  9)  (CURVIN) 


OR  3.1 


Columns 


11-20 


21-30 


41-80 


11-20 

21-30 

41-80 


11-20 

21-30 


41-80 


Description* 

NCURVE,  number  of  curves  to  be  read  from  the  curve  data 
base  (1-100) 

For  each  curve,  the  following  cards  (2-3)  are  needed: 

NSIZE,  number  of  points  in  this  linear  curve  or  number 
of  phases  in  this  Weibull  curve  (usually  1) 

NCOPT,  this  curve  option  code: 

0 linear  segment  curve  for  which  (X,Y)  segment  end 
points  follow 

1 Weibull  curve  for  which  p's  and  P(p/2)’s  follow  for 
each  failure  phase 

2 Weibull  curve  for  which  A's  and  B's  follow  for  each 
failure  stage 

NACC,  figures  of  accuracy  for  computation  of  A 

and  B in  Weibull  (usually  4)  if  the  i/s  and  P(y/2)'s 

are  given  as  input 

CURNAM,  40  character  curve  name  for  descriptive  purposes 

For  each  end  point  of  a linear  segment  curve,  the 
following  card  is  needed  (NCOPT  = 0) 

Identification  (NOT  USED)  (for  sequencing  deck-safety 
feature) 

CURVEX,  independent  variable  of  first  point 

CURVEY,  dependent  variable  of  first  point 

PO I NAM,  40  character  point  I.D. — Printed  on  output 
Card  3.0  is  repeated  for  each  point  with  the  points  in 
order  by  increasing  CURVEX. 

Weibull  parameter  card  for  first  failure  phase 
(NCOPT  = 1 or  2) 

Identification  (NOT  USED) 

li  or  A of  Weibull  distribution  for  first  failure  phase 

P(p/2)  or  B of  Weibull  distribution  for  first  failure 
phase  (P  £ -15) 

POINAM,  40  character  distribution  I.D.  if  desired. 

Card  3.1  is  repeated  for  each  phase. 


*Inteaer  fields  are  right  justified. 
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Cards  2 and  3 are  repeated  for  each  linear  segment  or  Wei  bull 
curve.  The  linear  curves  are  currently  looked  up  as  a linear 
interpolation  for  data  within  the  set  of  points  and  a linear 
extrapolat'on  for  data  outside  the  point  set.  One-point  curves 
are  considered  to  be  constants. 

Where  the  derivative  of  a linear  curve  is  required  in  the 
computation,  the  orogram  assumes  that  its  derivative  follows 
in  this  Curve  Data  Base. 


i 

i 


CONTROL  INPUT  CARDS  (Unit  5)  (INPUT!) 


Ca rd  Colunn 

1 1-76 

77-80 


2 1-5 

6-10 

11-15 

16-25 

41-80 

3-7  1-80 

8 1-5 

6-10 
11-15 
16-20 
21-25 


Description 

ITLE,  any  76  character  title  for  run 
IPR,  debug  print  option  code 

0 ^ no  debug  print 

1 give  debug  print 

NMISS,  number  of  missions  to  be  run  through 
(1-100) 

T,  length  of  all  missions  (in  hrs) 

Tau,  interval  between  missions  (in  hrs) 

EPS,  accuracy  for  GAUSSIAN  QUADRATURE  routine  (usually 

.00001) 

MISNAM,  40  character  mission  name 

MISDES,  5 card  mission  description;  5 cards  required, 
may  be  blank 

JDEL1 , step  for  mission  printout  up  until  mission  JMAXl 
JMAX1,  limit  for  use  of  JDEL1 
JDEL2,  step  for  mission  printout  after  JMAXl 
ISYS,  number  of  systems  which  are  to  be  used 
NCRIT,  number  of  critical  failure  modes  (1-5) 


*Note  that  currently  the  results  for  at  most  10  missions  can  be  printed  and 
that  the  results  for  the  last  mission  are  always  printed  regardless  of  the 

t . . . r mri  i niflui  - ..  J inn  n 

Vdiueb  Ui  uucli  , uri«A  I 9 emu  uucue.. 
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COMPONENT  INPUT  CARDS  (Unit  5)  (COMP,  ROCOMP) 


Card  Column 


Description 


1 


2 


3 


4 


1-10 


1-16 

21-30 

31-40 

51-60 

68-80 

1-16 

21-25 

26-30 

31-35 

36-40 

41-45 

46-50 

51-55 

I 

56-60 

61-80 

1 


2-3 


4-5 


6 


7-12 

13-13 


NTYPES,  number  of  components/equipments 

For  each  component/equipment,  the  following  cards 
(2-8)  are  needed 

IENAME,  16  character  equipment  name 

XNK,  number  of  components  irt  this  equipment 

XXK,  number  of  components  required  for  readiness  of 
equipment  (not  used) 

MSPAR,  maximum  spare  (<200 ) allowed  for  this  component 
IFUNAM,  functional  group  and  position  of  the  component 
ICNAME,  16  character  name  of  component 

NFAILS,  number  of  mission  failure  modes  for  this  component  (1-10) 

RHO,  usage  rate  of  component  or  missions 

IALPHA,  curve  number  for  computation  of  a as  function 
of  interval 

IBETAC,  curve  number  for  computation  of  8 (non  renew- 
ing probability)  as  function  of  time  used 

IGAMM1 , curve  number  for  computation  of  y,  (probability 
of  initiating  renewal)  as  function  of  tim£  used 

IGAMM2,  curve  number  for  computation  of  y2,  (renewal 
probability)  as  function  of  interval 

DELTA,  6 (probability  that  handling  between  missions 
will  not  cause  a failure) 

IRFRB,  rebuild  cycle  (missions)  (not  used) 

UNIT,  20  character  description  of  usage  variable 
(e.g. , hours,  miles) 

MODTYP(l),  mode  type  for  first  failure  mode  (1=>  use 
curve  defined  by  IEVN01 , 2 ^ use  two  step  failure 
defined  by  curves  IEVN01  and  IEVN02). 

IEVNOl(l),  curve  number  to  use  to  compute  R-j  as  function 
of  time  used 

IEVN02(1),  curve  number  to  use  to  compute  as  function 
of  time  used 

If  R-j , is  a linear  curve  and  M0DTYP=2,  then  the  next  curve  in 
the  curve  list  must  be  f i . 

ICR(l),  criticality  of  this  failure  mode  for  computation  of 
support  costs  by  criticality  at  the  system  level. 

Same  data  for  failure  mode  2,  if  any. 

Etc.  for  up  to  10  failure  modes  as  needed. 
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Card 

Col umn 

Description 

5 

1-6 

CK( 1 ) , cost  per  man  hour-service 

7-12 

C'((2),  cost  per  man  hour-preventive  maintenance 

13-18 

CK{3),  cost  per  man  hour-handling/transportation  failure 

19-24 

CK(4),  material  cost-per  service 

25-30 

CK(5),  material  cost-per  preventive  maintenance 

31-36 

CK(6),  material  cost-per  handl ing/transportati on  failure 

37-42 

CK(7),  cost  of  unavailability 

43-48 

CK(8),  cost  of  unreliability 

49-54 

HK(1),  man  hours  per  service 

55-60 

HK(2),  man  hours  per  preventive  maintenance 

61-66 

HK(3),  man  hours  per  handling/transportation  failure 

67-72 

HK(4),  man  hours  per  mission  failure  (not  used) 

73-78 

HK(5),  operating  interval  per  service  action 

6 

1-6 

CK3(1),  the  cost  per  man  hour  for  corrective  maintenance 
for  1st  failure  mode. 

7-12 

CK3(2),  the  cost  per  man  hour  for  corrective  maintenance 
for  2nd  failure  mode. 

55-60 

CK3(10),  the  cost  per  man  hour  for  corrective  maintenance 
for  1 0th  failure  mode. 

7 

1-6 

CK6(1 ) , the  material  cost  for  corrective  maintenance 
for  1st  failure  mode. 

7-12 

CK6(2),  the  material  cost  for  corrective  maintenance 
for  2nd  failure  mode. 

55-60 

CK6(10),  the  material  cost  for  corrective  maintenance 
for  10th  failure  mode. 

8 

1-6 

HK4(1),  the  man  hours  per  mission  failure,  for  1st  failure 
mode. 

7-12 

HK4(2),  the  man  hours  Der  mission  failure,  for  2nd  failure 

mode. 


55-60 


HK4(10),  the  man  hours  per  mission  failure,  for  10th  failure 
mode. 
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PROGRAM  AND  SUBPROGRAM  DESCRIPTIONS 


MAIN  - Main  Program 

This  main  program  calls  subroutines  to  1)  read  curve  inputs; 

2)  read  the  control  inputs;  3)  read  the  equipment  inputs; 

4)  compute  the  detail  results;  and  5)  print  the  results.  It 
processes  all  the  sets  of  inputs  on  unit  5 and  then  stops. 
Subroutines  called:  CURVIN,  INPUT!,  INIT,  COMP 

CURVIN  - Read  Curve  Inputs 

This  subprogram  reads  and  checks  the  curve  data  base  deck.  The 
Weibull  A's  and  B’s  or  y's  and  p(y/2)'s  are  computed  and  printed. 
Subroutines  called:  OOMPAB 

INPUT1  - Read  Control  Inputs 

This  subprogram  reads  and  checks  the  control  inputs. 

INIT  - Initialize  System  Totals 

Clear  the  system  totals  and  set  up  print  mission. 


COMP  - Control  for  Computation 

This  subprogram  controls  the  computation  for  each  equipment.  It  uses  sit>  routines 
to  read  equipment  inputs,  compute  a,  A,  ZA,  B,  component  costs 
and  spares  and  system  costs. 

Subroutines  called:  RDCOMP,  INIT2,  C0MP1,  C0MP2,  C0MP3,  C0MP4 , 

C0MP5 , C0MP6 , and  PRTOT 

RDCOMP  - Read  Component  Inputs 

This  subprogram  reads  and  checks  the  component  data  deck. 

INIT2  - Initialize  Curve  Values  and  Products 

This  subprogram  computes  the  values  of  the  mode  integral,  R^,  S,y  and 
their  oroducts  needed  in  the  later  computations. 

Subroutines  called:  CURVE,  COMPRK,  COMPIN. 

COMP1  - Compute  A 

This  subprogram  computes  A recursively  for  all  the  missions, 
causes,  and  failure  modes. 

COMP 2 - Compute  ZA 

J h i f u re b[fr xie1  ra m comPutes  ^ for  causes,  missions,  and 
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COMP 3 - Compute  B 

This  subprogram  computes  B for  all  causes  and  failures  for  the  mission; 
in  MUST.  Subroutines  called:  PMULTl . 

C0MP4  - Compute  Little  A's 

This  subprogram  computes  the  little  A's  recursively  for  all  the 
missions,  causes,  and  failure  modes. 

C0MP5  - Compute  the  Component  Results 

i * 

This  subprogram  uses  the  B's  to  compute  the  component  costs  for 
the  numbers  of  missions  in  MUST. 

C0MP6  - Compute  Spares  Probabilities 

This  subprogram  uses  the  B's  to  compute  the  spares  probabilities 
for  the  mission  configuration  specified  by  MUST  and  ISYS. 

Subroutines  called:  PMULT2 

PRTOT  - Print  System  Results 

Print  the  system  results 

PMULTl -(P.  A,  N,  IRP1)  - Multiply  Two  Polynomial  with  No  Constant 

This  subprogram  multiplies  the  polynomials  in  P and  A together 
to  generate  their  product  in  P.  N is  the  degree.  The  poly- 
nomials have  no  constant  terms  and  the  product  is  limited  to 
degree  N.  IRP1  is  the  first  non  zero  term  in  the  answer. 

(IRP1-1  is  the  first  non  zero  term  in  the  input  P). 

PMULT2  - Multiply  Two  Polynomials 

This  subprogram  multiplies  P0LY1  and  P0LY2  to  generate  P0LY3. 

P0LY1  has  degree  NP0LY1;  P0LY2  has  degree  NP0LY2;  P0LY3  has 
degree  MIN(MSPAR  + 1,  NP0LY1  + NP0LY2  - 1). 

COMPRK  (TE1,  IBFAIL,  IEFAIL)  - Compute  Survival  Probability 

This  function  type  subprogram  computes  the  probability  of  survival  (R. 
for  one  or  more  failure  modes.  TEl=usage  and  IBFAIL=first  failure  mode  i 
interest  and  IEFAIL=the  last.  Subroutine  called:  CURVE,  AUGAUS 


AUGAUS  (A,  B,  R,  S,  J,  F,  RP)  - Gaussian  Quadrature 

This  is  a standard  Gaussian  Quadrature  routine  used  in  this  pro- 
gram to  compute  the  two  stage  integral  possibly  required  for  the 
computation  of  RU. 

Subroutine  called:  None 


m 
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COMPIN  (BIN,  BFI,  IB)  - Compute  Mode  Integral 


This  function  type  subprogram  computes  the  mode  integral  in  the  "a" 
computation  from  BIN  to  BFI  for  mode  IB. 

Subroutine  called:  AUGUSZ 

AUGUSZ  (A,  B,  R,  S,  J,  F,  RP)  - Gaussian  Quadrature 

This  is  another  Gaussian  Quadrature  routine  required  for  the  computation 
of  the  mode  integrals  which  in  the  case  of  two-stage  failures  involve 
computing  a double  integral. 

COMPGK  (TE1,  IH)  - Compute  the  Mode  Integral  Integral 

This  function  type  subprogram  computes  the  value  at  TE1  of  the  integral 
for  the  mode  integral  for  mode  IH.  It  is  similar  to  COMPRK  except  that 
the  derivative  of  the  IHth  mode  is  used. 

Subroutines  called:  CURVE,  AUGAUS 


C-91a 
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CURVE  (IX,  X.  I WE I BO)  - Curve  Look-up 

This  function  type  subprogram  computes  the  value  of  the  IXth 
curve  using  X as  the  argument.  Only  answers  between  0 and  1 are 
allowed  and  the  answer  may  be  complemented  depending  on  IWEIBO. 
Subroutine  called:  YLIN36 

COMPAB  (XMU,  P,  A,  B,  NACC)  - Meibull  Parameter  Computation 

This  subprogram  computes  the  A and  B of  the  Weibull  distribution 
using  XMU  and  P with  accuracy  NACC  (figure). 

Subroutine  called:  WEG,  GAMMA 

WEG  (I,  XNP1,  J,  N)  - Solve  X = f(X) 

This  subprogram  permits  the  iterative  solution  of  an  equation 
of  form  X = f (X) . 

Usage: 

1st  Call:  1=1 

XNP1  = initial  value  on  input/new  value  on  output 
J = accuracy  desired  (figures) 

N = not  used. 

Successive 
Calls:  I = 2 

XNP1  = f (XNP1)  from  last  call  on  input/new  XNP1 
on  output 

J = not  used 

N = 0 solution  not  found  so  recompute  f.(XNPl) 

N = 1 solution  is  XNP1. 

YLIN36  (N,  XL,  YL,  X)  - Linear  Curve  Look-up 

This  function  type  subprogram  generates  the  value,  using  X as 
the  argument,  of  the  function  YL  = f(XL)  where  f (XL)  is  a 
linear  segment  curve  specified  by  the  N points  (XL,  YL). 
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PRINT  OUTPUT 


The  program  generates  printed  outputs  of  the  inputs  as  read,  as  well  as 
optional  de-bug  information  and  summary  results.  The  following  discussion  is 
broken  down  by  output  unit.  A Job  Deck  Listing  with  test  data  can  be  found  at 
the  end  of  this  section  along  with  an  example  Of  the  program  output. 

UNIT  6— Input  and  Error  Message  Print 

CURVIN — The  curve  inputs  are  printed  as  read  except  that  for  the  Weibull 
distributions. 

The  A's,  B's,  p's  and  P(p/2)'s  are  all  printed. 

INPUT1— The  title  and  mission  data  inputs  are  printed  as  read. 

COMP--  The  title  is  printed  as  well  as  the  NTYPES  input  card 
If  IPR  H 0 the  A's,  ASUM's  and  B's  are  listed. 


RDCOMP — The  equipment  inputs  are  printed  as  read 


stops. 


All  error  messages  are  printed  as  follows  and  the  program  usually 


CURVIN— NCURVE  TOO  BIG  (NCURVE,  LIMIT) 

NCOPT  OUT  OF  RANGE 
NO  ROOM  FOR  CURVES  (LIMIT) 

NO  CURVE  DATA 
P TOO  SMALL  (P,  LIMIT) 

INPUT1 — NMISS  TOO  BIG  (NMISS,  LIMIT) 

NLIST  TOO  BIG  (NLIST,  LIMIT) 

RDCOMP— IBETAC  OR  IGAMM1  OR  IGAMM2  OR  I ALPHA  TOO  BIG 
(IBETAC,  IGAMM1 , IGAMM2,  I ALPHA,  LIMIT) 

NFAILS  TOO  BIG  OR  SMALL  (NFAILS) 

BAD  DATA  FOR  FAILS  (IFAILS) 

XNK  BAD 
DELTA  BAD 

INIT2--  GAMMA1  + BETA  GREATER  THAN  ONE  (I,  GAMMA,  BETA) 
COMPRK — CCMPRK  CANNOT  EVALUATE  RK  (ARGUMENT) 

CURVE—  NCOPT  NOT  0 OR  1 IN  RK  COMP  (IX,  X,  IXC2,  NCOPT) 
COMPAB— CANNOT  SOLVE  FOR  A,  B (XMU,  P,  NACC,  NTIMES) 


INIT2 — I , PRODBE(I),  ALPHAL(J) , ALPHA(J),  DELTAL(I) 

COMP1  — I,  IU,  TE1-TE5,  A(l,5) 

COMP1--N.N,  (A(N,J) , 0=1,5),  (A4  (N.IFAILS),  IFAILS  = 1,  NFAILS) 

C0MP1 — I , IU,  TE1-TE5,  TE11-TE14,  TE17,  TE18,  TE20,  TE21 , TE27,  TE30-TE34, 
SUM1 , A(I ,5) , SUMA 

C0MP4--N,  (LA(N,J) , J=1 ,5)  (LA4  (N.IFAILS),  IFAILS=1 , NFAILS)  LA4SUM(N) 
UNIT  18— Component  Data  and  Results  Print 
INPUT1— The  mission  data  are  printed 

ROCOMP— The  equipment  and  component  data  are  printed  broken  down  by  life 
characteristics  and  maintenance,  frequency  characteristics 

INIT2 — The  component  life  and  support  distribution  are  printed 

C0MP5--  The  component  results  are  printed 

C0MP6--  Spare  probabilities  are  printed 

UNIT  19— Component  Failure  Mode  Results 


C0MP5--  The  component  results  are  printed  broken  down  by  failure  mode. 
UNIT  20" System  Results 

PRT0T-- System  results  are  printed. 

UNIT  21— Component  Data  and  Results  Print 


C0MP5— The  component  criticality  results  are  printed. 
PRTOT— The  system  criticality  results  are  printed. 


COMMON  REAL  VARIABLES 

Currently  the  Common  Real  Variables  are  defined  as  REAL*4. 

T t,  the  length  in  hours  of  the  missions 

TAU  The  time  between  missions 

XMAR  Mission  arrival  rate 

CURVEX  (400)  CURVEX  contains  the  abscissas  of  the  linear  curves  and 
the  A's  or  y's  for  the  Weibull  distributions 
CURVEY  (400)  CURVEY  contains  the  ordinates  of  the  linear  curves  and 
the  B's  or  P's  for  the  Weibull  distributions 
P0INAM(1 0,400)  The  40  character  names  for  the  400  points 

CURNAM(lO.lOO)  The  40  character  names  for  the  100  curves 

WEIBA  (400)  The  A's  for  the  Weibull  distributions 
i WEIBB  (400)  The  B'es  for  the  Weibull  distributions 

XNK  Nk  for  the  current  equipment  (total  components  in  the  equipment) 

XXK  Xk  for  the  current  equipment  (total  components  needed  for 

availability)  (not  used) 

XXKP  Xk  for  the  current  equipment  (total  components  needed. for 

success) (not  used) 

1 ALPHA  The  a for  this  equipment 

RHO  Equipment  usage  rate  (p) 

DELTA  6 for  this  mission 

UNIT  (5)  20  character  description  of  units  for  mission  length 

SUMT  SUMT  is  the  sum  of  the  usage  at  the  end  of  the  Ith  mission 

going  back  J missions  (counting  the  Ith) 

CAP?  Not  used 

DELTT  Not  used 

XIT  1 Not  used 

SUMBAC  Not  used 

SUMBAV  Not  used 

SUMBRE  Not  used 

OMEGA (2)  Not  used 

AC  Not  used 

AV  Not  used 


RE 

Not  used 

RHOT 

Operating  time  (RH0*T) 

RKL  (100) 

R^'s  for  the  missions 

BETA  (100) 

3's  for  the  missions 

XAMMA  (100) 

y's  for  the  missions 

RKLO 

R^  at  start  1st  mission 

SSLIFE 

System  service  life 

EPS 

Definition  of  zero  for  quadrature  routine 

6AMMA2 

^2 

PRODBE  (100) 

I 

PRODBE(I)  is  the  H 3*  for  the  B's  above. 
i=l  1 

A(100,5) 

The  computed  A's  for  each  mission  for  the  causes  plus 

the  total.  (A( I . J ) ) is  the  probability  of  no  replace- 
ment for  I missions  for  the  cause. 


ASUM  (100,5)  The  partial  sums  of  the  A's 

HK(5)  The  HK's  are  the  input  five  hourly  rates  for  the  cost 

computation 

CK(9)  The  CK's  are  the  eight  cost  factors  for  the  cost 

computation 

SUMCO  (14,10)  SUMr"(I.J)  is  the  Ith  result  for  the  system  at  the  Jth 
t:  >f*~n  number  in  the  ML  I ST 

CRES  (14,10)  CRtj(I,j)  is  the  Ith  result  for  the  equipment  at  the 
Jth  mission  number  in  the  MUST 

CAUSE  (4,5)  These  are  the  16  character  names  for  the  four  cause 
plus  total 

POLY  (100)  The  coefficients  of  the  generating  polynomial  of  the 
A's.  Only  relevant  items  computed. 

PRFIL  (5)  PPFIL  contains  spares  results  for  the  four  causes  plus 

r*  to  J 

PRFIL2  (5)  °;<Ku2  contains  summaries  for  the  spares  results 

P0LY1  (201)  Thv  coefficients  of  the  previous  polynomial  of  spares 
probabilties 

P0LY2  (201)  The  coefficients  of  the  B polynomial  being  used  to 
multiply  P0LY1 
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P0LY3  (201)  The  coefficients  of  the  polynomial  of  spares 
probabilities 

B (101,10,5)  B (I ,M,J)  is  the  probability  (B)  of  (1-1)  total  soares 
being  needed  to  support  MUST  (M)  missions  for  each  of 
the  four  causes  plus  total. 

ALPHAL  (100)  The  products  of  the  a's 

ALPHAC  (100)  The  products  of  the  (l-a)'s 

DELTAL  (100)  The  products  of  the  6's 

CRESHT  (3,10)  The  cost  results  for  handling/transportation  for  10  missions 
of  labor-per-total 

SUMCHT  (3,10)  The  system  cost  results  for  handling/transportation  for  10 
missions  for  labor-per-total 

LA  (100,5)  The  a's  for  each  of  the  100  missions  and  4 causes  plus  total 
LA4  (100,10)  The  a4*s  for  each  of  the  100  missions  and  10  failure  modes. 

LA4SUM  (100)  The  sums  of  the  84 's  over  all  failure  modes. 

RKLINT  (100,10)  The  10  mode  integrals  for  each  mission. 

PRFL4  (10)  The  expected  equipment  usage  for  failure  by  mode 
HK4  (10)  The  man  hours  per  mission  failure  by  mode. 

B4  (101,10,10)  The  B polynomials  for  each  failure  mode. 

A4  (100,10)  The  A polynomial  for  each  failure  mode. 

ASUM4  (100,10)  The  partial  sums  of  the  A's  for  each  failure  mode. 

CK3  (10)  The  cost  per  man  for  CM  by  mode. 

CK6  (10)  The  material  cost  for  CM  by  mode. 

CRES47  (10,10)  The  cost  results  for  10  missions  and  failure  modes  for  labor 
CRES48  (10,10)  The  cost  results  for  10  missions  and  failure  modes  for  personnel 
CRES49  (10,10)  The  cost  results  for  10  missions  and  failure  modes  total 
CRCR47  (10,5)  The  system  cost  results  for  5 criticalities  for  labor 
CRCR48  (10,5)  The  system  cost  results  for  5 criticalities  for  personnel 
CRCR49  (10,5)  The  system  cost  results  for  5 criticalities  total 


COMMON  INTEGER  VARIABLES 


ITLE  (20) 

NMISS 

I0PT1 

NTYPES 

IPR 


NLIST 
MUST  (10) 
MSTART 
MISNAM  (10) 
MISDES  (20,5) 
I 

IM1 

ITYPES 
NCURVE 
NSIZE  (100) 
NCOPT  (100) 


NACC  (100) 
IBEG  (100) 

IENAME  (4) 
ICNAME  (4) 
NFAILS 
IVENOl  (10) 
IVEN02  (10) 
MODTYP  (10) 

IALPHA 

IBETAC 

IGAMM1 

IGAMM2 

IRFRB 


20  word  (80  character)  run  title 
Total  number  of  missions  (1-100) 

Not  used 

Number  of  equipments/components 
Debug  print  option  Code  0 ^ no 

1 ^ yes 

Number  of  missions  to  print  (1-100) 

Number  of  the  missions  to  print 
Index  for  search  of  MUST 
40  character  mission  name 
5 card  mission  description 
Mission  number 
1-1 

Equipment  number 
Number  of  curves  (1-100) 

Size  of  each  curve  (1 -1 0) 

Options  for  each  curve  0=)  segment 

1 =>  Weibull  with  A's  and  B's 

2 Weibull  with  p's  and  P's 
Accuracy  for  Weibull  computation  for  each  curve 
Starting  place  in  the  CURVEX,  CURVEY  lists  for  each 
curve 

Equipment  name 
Component  name 

Number  of  failure  mode  (1-10) 

Curve  numbers  for  first  phase  of  10  failure  modes 
Curve  numbers  for  second  phase  of  10  failure  modes 
Mode  for  each  failure  mode  1 ^ one  phase 

2 ^ two  phases 

Curve  number  for  a computation 
Curve  number  for  B computation 
Curve  number  for  y-j  computation 
Curve  number  for  y^  computation 
Refurbish  cycle  number 
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ICYC 

Index  of  mission  number  in  cyclic  mode 

ICYCM1 

ICYC-1 

JDEL1 

Step  for  mission  print  before  the  JMAX1  mission 

JMAX1 

Limit  for  use  of  previous  print  mission  step 

JDEL2 

Step  for  mission  print  after  JMAX1  mission 

I READ 

Not  used 

IWRITE 

Not  used 

IFUNAM  (4) 

Function  group  code  of  equipment 

ISYS 

ISYS  is  the  number  of  systems  being  used 

NMISP1 

NMISS  + 1 

MSPAR 

Maximum  number  of  spares  to  compute  the  probability 
for  (1-200) 

MSPAP1 

MSPAR  + 1 

NP0LY1 

Degree  + 1 of  P0LY1  (1-201) 

NPOLY2 

Degree  + 1 of  P0LY2  (1-201) 

NPOLY3 

Degree  + 1 of  P0LY3  (1-201) 

NCRIT 

Number  of  critical  failure  modes  (1-5) 

ICR  (10) 

For  the  component,  the  criticality  number  of  each 
failure  mode. 

CRPRL4  (5) 

The  expected  corrective  maintenance  actions  results  for 
10  missions  by  5 criticalities. 

SUMEX (12 ,10) 

The  system  results  for  10  missions  and  the  expected 
maintenance  actions  by  types. 

SUME  Y(6,10) 

The  system  results  for  10  missions  and  the  expected 
corrective  maintenance  actions  by  5 criticalities. 

Set  limits 


Read  N CURVE 
Stop  if  error 


1-MI 

Set  curve  index 


Read  NSIZE,  NCOPT, 
NACC,  CURNAM  for  curve 
II;  stop  if  error 
Set  storage 


1 —*"13 

Set  point  index 

m 

— ^ 

t 

Read  CURVE 
CURVE  Y for 
into  list 

X 

Point  13 

Compute  Wei  bull  A and 
B or  v and  P(y/2)  if 
necessary 


If  NCOPT  = 2 
Set  IT  = 1 


READ  CURVE  INPUTS 
CURVIN 


13+1  — >13 

STEP  to  next  point 


Return 


^11  i ^ 
NCURVE-more 
curves 


n+i-^ii 

Step  to  next  curve 


INITIALIZE  SYSTEM  TOTALS 
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CONTROL  FOR  COMPUTATION 


f y 

Start 

V J 


Read  NTYPES 
(Number  of 
Equipments) 


1 I TYPES 
Set  Equipment 
Index 


(RDCOMP)  ' 
Read  Equip- 
ment Inputs 
Stop  if  Error, 


(INIT2)  N 
Initialize 
Equipment 
Data  . 


/ (C0MP4)  \ 
Compute  a's  for 
all  Missions  and 
\ Causes  / 


compute  A's  for* 
all  missions  & 
causes  & total  / 


Compute  ASUM 
.for  all  Missions 


/ (C0MP3)  \ 

' Compute  B for 
.Listed  Missions, 


If  IPR  * 0 
Print  A,  ASUM, 
B(FINAL)  for  all 
Missions 


(C0MP5) 

Compute 

Results 


(C0MP6)  N 

Compute 

Spares 

’robabilities/ 


Step 

Equipment 

Index 


More 


Equipment, 


(PRTOT) 
Print  System 
Totals 


Return 
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INITIALIZE  EQUIPMENT  DATA 
INIT2 


1 — M Start 
RHO  * T -*•  F.HOT 
o TE1 
Print  Title  UnitJ 
18  1 -*■ 1 
(Mission  Index) 


^JRFRB 

.PastS* 
ild^ — 

No 

TE1  + RHOT-*-TEl 

1 

> 

Mode  Integrals 
— ►RKLINT 
(COMPIN) 

: 

Compute 
COMPRK  ( 
NFAILS) 

RKL  (I)« 
TE1 ,1 , 

CURVE  (IGAMM1 ,TE1 ,1 ) 
GA.VV.A(I  )CURVE(I3ETAC) , 
TF1.o)-»»BETm., 


COMPRK 

(0,1, 

NFAILS) 

— RKLO 

1— PROD 

1— PA 

1-*PAC 

1 -a  -*-AC 

1-*PD 

1-1 

(Mission  index) 

PROD*BETA-*PROD 
PROD"*PRODBE(I) 
PA*ALPHA  -*PA, 
PA— ►ALPHAL ( I ) , 
PAC*AC-*PAC,PAC 
“►ALPHAC( I ) ,PD* 
DELTA-^PD.PD— ► 
DELTAL(I) 

r- — 


If  IPR/O, Print 
I,  PRODBE(I), 
ALPHALC I ) .ALPHALj 
(I),  DELTAL(I) 


Step  mission 

Step 

i ndex 

Mission 
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4#,  v«.;s 


Hf  . 


r > 

Start 

V J 


COMPUTE  A 


1+  I O*  IU 
RKL(I)-*  TEl 
TE1*DELTA+  TE2 
(1-TE2)*  TE3 
TE3*ALPHA-*’  TE4 
GAMMA(I)*  TE5 
rE2*TE5+TE4>A(I 
A(I,5)-»  SUMA 


If  IRP  j 0 Print 
I,IU,TE1 ,TE2, 
TE3,TE4,TE5, 
A(I,5) 


IU-1-*  IUM1 
I-U-1-*  IMIUM1 


PRODBE ( IUM1 )-*TE30 
ALPHAC(IMIUM1)-*TE17 
DELTAL(IU)-*TE22 
RKL( IU+1  )-*-TE18  (TE21 
*TE17)*ALPHA*TE30-* 
TE31  ( 1 GAMMA (IU)* 

RKL(IU)-*TE32  BETA.  ' 
(IU)*TE18*DELTA-* 

TE33  ,TE31*(TE32-TE33) 
-*TE34  ,SUMl+TE34-*> 


Hllill 


If  IPR/O,  Print 
I ,IU ,TE1-TE5, 
TE11-TE14  TE17 
18,TE20,TE21 , 
TE27,TE30-TE34, 
SUM! ,A(I .5) .SUM 


Step  Mission  Index 
I+l-I 


^ 

Missions 

sUNMISS 


If  IRFRP*NMISS 
A(IRFRB,5)+1- 
SUMA->A(IRFRB, 
5) 


Set  Mission 
I 


' I > 
IFFRS 


I-l*  Tmi 
DELTA(I)*TE11 
RKL(I)->TE12 
PR003E(IM1 )*  TE13 
GAMMA ( I )->  TEl A 
ALPHAC(  IM1  )•>  TE27 
TEll*TEi2+TE13* 

TE1 4^124^7227^  7E2Q 
0-  SUM  I !■»  IU 


<!y 


IU  + 1 — > IU 


TE20+  SUM!  ->  A ( 1 , 5 ) 


SUm+A(I,5) 

-*SUMA 


© 
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Clear 

A for  4 

Causes 

and  all 

mi 

ssions 

Clear 

A4 

Set  A's&A4forall 
Causes  and  1st 
Mission=to 
Little  A's 


If  IPRj'O 
Print  A’s  for 
1st  Mission 


I! 


THE  SUM  OF  THE  A'S 
COMP2 


c-no 
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IR-MM 

0+B(IRPI,M,J) 
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COMPUTE  THE  LITTLE  A's 
C0MP4 


Start 


1-*N  (Mission  No.)  DELTA 
*RKL(N)*GAMMA(N)-»LA(N,1 ) 
RKL0*(1 -DELTA )*ALPHA-^ 
LA(N,2),0-*LA(N,3l,  DELTA 
*(RKLO-RKL(N))*ALPHA-» 

LA(N,4),0-*LA(N,5}  Z 

LA(N,J)->LA(N, J) . La}n,3) 
->SUMLA  If  I PR#)  Print 
LA(N,J)'s;  also  LA4 


\Yes  f > 
NMISS=1  > — *Returr 


Clear  LA(N,J) 
J=1 ,5 

N=2,  NMISS 


N-I-»NMI  ALPHAC(NMI) 
-»ALPHC  (or  1) 


I>lN! 4 


1-1  -»IMIy  LA(N,2) 
*DELTAL(IM1 )* 

RKL(IM1 )*PR0DBE 
( IM1 )*ALPHC-» 

LAPN , 2 \ PRODBE 
( I -2 ) — >PR0DB  (or  IV 
LA(N , 3)+DELTAL( IM1 ) 
*RKL( IM1 )*PR0DB* 
O-BETA(IMl)- GAMMA 
( IM1 ) )*ALPHC-»LA(N,3] 

LA(N,4)+DELTA(I)* 

( RKL ( IM1 )*RKL(I))* 

~ RQDBE ( IM1 )*ALPHC-* 
A(N,4) ; also  LA4 


^ More  x^Yes  f ^ 
Missions  S *\  3 


2-*N 

Mission  Index 


I+1-»I 


N-1-^NMI 

DELTA(N )*RKL (N )*PR0DBE 
(NMI)*GAMMA(N)-*LA(N,1 ) 


LA(N,2)*(1-DELTA)*ALPHA 
-»LA(N,2)  LA(N,3}*ALPHA 
-»LA(N ,3)  LA(N,4)*ALPHA 
-!>LA(N,4),  Also  LA4 


LA(N,2)+RKL0*ALPHC-* 

LA(N,2) 

LA(N,4)+DELTA*(RKL0- 
RKL(1 ) )*ALPHC 
-»•  LA(N,4) ; also  LA4 


V 


COMPUTE  THE  EQUIPMENT  RESULTS 
COMP  5 
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* 


SUMI-»PRFIL(J)  SUM2- 
SUM1  * SUM1  — <r 
PRFIL2(J)  Compute  EO, 
E5,E6,E7  Print  PRFIL 
and  E's  Compute  CRES 
(1-14, n)  Step  SUMCQ. 
PRFL4,  CRPRL4 

~nzr 


M+l-^M 


Print 

CRES,CRPRL4 
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COMPUTE  SPARES  PROBABILITIES 
COMP  6 


> 


4 
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PRINT  SYSTEM  RESULTS 
PRTOT 
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y.vr 


V 


COMPRK  (TE1,  IBFAIL,  IEFAIL) 
COMPUTE  Rk  FOR  A SET  OF  MODES 
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tBSM 


— ii-Wiin  V 


AUGAUS  (A,B,R,S,J,F,RP) 
GAUSSIAN  QUADRATURE 


This  is 


AUGUSZ  (A,B,R,S,J,F,RP) 
GAUSSIAN  QUADRATURE 


a standard  OR  I library  routine. 


c-nsd 
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CURVE  LOOK-UP 
CURVE  (IX,X,IWEIBO) 


Start 


0 Curve 
IX  IC 
0 ISWTCH 


Function  Routine  with 

IX  = curve  /•'  or  if  neeativ'1 

compute  derivative  of 
curve  /'  (if  T inea''-  next 
curve) 

X - Independent  variable 
1WEIB0  = code  for  complement 

of  result 

0 ■=>  no 

1 -^yes 


•IC  ->  ICABS 


Return 


ICABS+1  ->  IC 
Use  next 
curve 


^NCOPT 
’ I CABS ) >0 


NCOPT 
(IC)<  0 


Linear  curve 
look-up  of 
curve  IC^curve 


Return 


1 ISUTCH 
ICABS  -*IC 


NSIZE  (IC)  ~>J2 
0 -»  SUM4 

0 SUM5 

1 -»  PR0D4 
IBEG(IC)-*IST0RE 
(Point  index) 

1— >13  (mode  index) 


A**B  -*TE10 
(exponent) 


WEIBULL  PARAMETER  COMPUTATION 
COMPAB  (XMU,P,A,B»NACC) 


SOLVE  X = F(X) 
WEG  (I,  XNP1 , J,  N) 
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APPENDIX  D 

ILLUSTRATIVE  COMPUTER  APPLICATION  OF  AMSEC  METHODOLOGY 


The  following  pages  provide  a full  illustration  of  the  use  of  AMSEC  in  its 
current  version.  The  methodology  has  been  applied  to  a hypothetical  system 
configuration  which  is  shown  schematically  in  Figure  D.l.  The  components,  which 
are  given  the  names  "Little  Anna",  "Barbara",  and  "Chloe"  for  convenience,  are 
considered  to  be  grouped  in  the  series-parallel  configuration  as  shown.  The  sys- 
tem success  requirements,  in  terms  of  the  number  of  components  which  must  be  opera- 
ble for  reliability  purposes,  and  for  availability  purposes,  are  shown  in 
parentheses. 

The  input  parameter  values  are  shown  first  in  data  card  format  (Tables  D.la, 
D.lb,  and  D.lc).  These  inputs  are  then  shown  as  called  up  by  the  computer  for 
review,  and  component/equipment/ system  RMACS  is  displayed.  The  computer  application 
is  organized  in  the  following  way: 

Table  D.2  System  Operational  Inputs 
Table  D.3(a)  Input  Information,  Little  Anna 
Table  0.3(b)  RAM  Assessment,  Little  Anna 
Table  0.4(a)  Input  Information,  Barbara 
Table  D.4(b)  RAM  Assessment,  Barbara 


Table  0.5(a)  Input  Information,  Little  Chloe 
Table  D.5(b)  RAM  Assessment,  Little  Chloe 
Table  D.6  RAM  Assessments  for  Subsystems 

(a)  Anna  (2  components) 

(b)  Barbara  (1  component) 

(c)  Chloe  (10  components) 
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Table  D.7  RAM  Assessment  for  Systems 

Table  D.8  System  Operational  Inputs 

Table  0.9(a)  Input  Information,  Little  Anna 
Table  D.9(b)  Output  Cost/Spares,  Little  Anna 
Table  D. 10(a)  Input  Information,  Barbara 
Table  D. 10(b)  Output  Cost/Spares,  Barbara 
Table  D.ll(a)  Input  Information,  Little  Chloe 
Table  D. 11(b)  Output  Cost/Spares,  Little  Chloe 
Table  D.12  System  Output  for  Support  Cost 

Several  explanatory  comments  regarding  these  Tables  follow.  The  comments 
refer  to  corresoonding  points  in  the  Tables  as  annotated  by  the  letters  "A",  "B", 

"C",  etc.  A full  list  of  flagged  references  is  shown  as  Table  D . 1 3 . 

The  handling  of  multi-mode  double  stage  failure  distributions  and  their 
combined  behavior  and  impact  on  component  RAC  is  shown.  Component  "Barbara"  for 
example,  has  a two  stage  failure  distribution  with  respect  to  a first  failure 
mode  and  a single  stage  Weibull  with  respect  to  a second  mode.  Reference  "A"  shows 
the  composite  distribution  of  survival  probability  with  respect  to  mode  1.  "B" 

shows  the  composite  distribution  of  survival  probability  with  respect  to  mode  2. 

AMSEC  as  currently  programmed  can  accept  up  to  10  failure  modes. 

A glance  at  the  output  columns  displaying  mission  probability  of  accomplish- 
ment, readiness,  and  reliability  demonstrate  how  the  renewal  force  of  maintenance, 
in  combination  with  the  component  life  characteristics  can  influence  mission  readi- 
ness and  reliability,  "C2"  and  "C^"  respectively.  Little  Anna  readiness  changes 
little  from  mission  to  mission.  Her  reliability  varies  a bit  over  the  first  half 
dozen  missions,  tending  to  settle  down  to  .72  as  missions  continue.  Readiness  for 
Barbara  varies  moderately  while  her  reliability  remains  virtually  constant. 

Little  Chloe  demonstrates  with  her  peculiar  life  and  handling  habits  a dramatic 
variability  in  reliability  from  mission  to  mission.  This  variability  is  amplified 
as  we  observe  the  equipment  Chloe.  This  equipment  requires  at  lease  nine  little  Chloe's 
out  of  10  to  be  operable  at  start  of  mission  for  readiness  and  at  lease  seven  little 
Chloe's  to  be  ooerable  at  end  of  mission  for  equipment  to  be  mission-reliable. 

With  these  requirements  we  observe  for  equipment  Chloe  a tremendous  change  in  reli- 
ability from  mission  tc  mission  and  somewhat  of  a lesser  change  in  readiness. 

Corrective  procedures  to  correct  or  reduce  such  variability  would  encompass  a change 
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in  the  maintenance  plar  to  force  renewal  of  components  before  failure  (e.g., 
install  a TBO  at  100  or  200  component  operating  hours). 

The  inputs  for  the  display  of  RAM,  when  combined  with  man-hour  and  cost 
assignments  covering  various  "states"  into  which  a component  can  fall,  permit 
the  calculation  of  the  expected  number  of  various  maintenance  actions,  and  their 
associated  dollar  costs  necessary  to  sustain  a given  mission  operating  profile 
or  plan  for  use.  For  example,  operating  a "little  anna"  over  25  missions  would 
require  7.03  maintenance  actions,  on  the  average;  this  excludes  routine  service 
actions,  which,  assuming  one  per  mission,  would  be  25  as  shown. 

The  output  data  array  following  the  array  of  maintenance  activity  by  kind 
permits  review  and  categorization  of  operating  cost  centers. 

Also,  the  output  displays  the  probability  distribution  of  spare  "little 
anna's"  that  may  be  used  in  sustaining  operation  of  25  missions  for  a single 
system.  It  should  be  noted  that  this  distribution  takes  into  account  that  there 
are  two  "little  anna's'  on  the  system.  Likewise  there  are  10  little  chloe's 
making  up  Chloe.  Thus  the  component  requiring  the  greater  number  of  spares  to 
support  the  system,  other  considerations  aside,  would  be  "little  chloe's". 

Finally,  the  last  pages  in  the  computer  printouts  under  RAM  and  cost  displays 
the  aggregate  system  mission  reliability,  the  readiness  from  mission  to  mission; 
and,  in  the  sustinence  of  a plan  for  system  use,  the  aggregation  of  total  cost 
and  various  cost  categories  of  interest. 
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TABLE  D.23.  FLAGGED  REFERENCES  FROM  TABLES  D. 3-TABLE  D. 1 2 


7 


Composite  two  stage  life  characteristic  (single  mode) 

Argument  vs.  probability  of  mode  survival 

Composite  component  life  characteristics  (all  modes) 

Argument  vs.  probability  of  survival 

Probability  of  no  PM  with  component  age 
Argument  vs.  probability  PM 

Probability  of  complete  PM  with  component  age 
Argument  vs.  probability  PM  is  initiated  anu  completed 

Probability  of  incomplete  PM  with  component  age 
Argument  vs.  probability  PM  is  initiated  and  not  completed 

1L 

Accomplish  orobability  regarding  i mission  i=l,2,  etc.  that 
component/equipment/system  is  ready  and  functions  as  required 
throughout  mission 

XL 

Readiness-probability  regarding  i n mission  i=l,2,  etc.  that 
component/equipment/ system  is  operable  at  start  of  mission 

Reliability- probability  regarding  i mission  that  component/ 
equipment/ system  functions  as  required  throughout  mission  given 
that  it  is  ready 

Average  comoonent/equipment/system  accomplish,  readiness,  and 
reliability  equate  to  running  averages  of  individual  mission 
probabilities,  viz, 

V it 

Av  P over  v mission  = l P.  where  P-  represents  il  mission 

i=l 

probability  of  accomplishment,  readiness,  or  reliability. 

Spares  probability,  lists  probability  that  exactly  W spares 
will  be  consumed  by  h systems  operating  over  v mission 

Spares  cum  probability,  cumulates  D-l  probabilities  and  equates 
to  probability  W or  less  spares  will  be  consumed  by  h system 
operating  over  v missions. 


